Can we have a policy page to enact the following platform specific blocks of DNS over HTTPS, preventing the use of this technology to bypass DNS Filter.
Disable / Lock the use of DNS over HTTPS in
-Chrome
-Edge
-Firefox
-Brave
-Windows 11 (native DNS client)
All of the browser can be done by inserting the relevant registry key to enact the browser control policy.
Windows 11, can be done by running the following command
netsh dns set global doh=no # DNS over HTTPS
netsh dns set global dot=no # DNS over TLS
We are implementing these controls ourselves, but it would be helpful to have this packaged into the DNS Filter platform and maintained here, to form a complete solution.