DNS in vivaldi 3.5

killermiller

mmhmmm yes and no. Im pretty sure its activated by default - practically.
I downloaded the current snapshot as standalone and its activated by default + the option is not present in my vivaldi 3.4 installation

Im not sure how the chromium interpretation of "With your current service provider" (which is set after fresh install) is though, maybe it automatically falls back to googles DNS if the default DNS its not resolving on 443? maybe it was changed recently?

Pathduck

@killermiller I can't test this because I use some GPOs set globally so the option is disabled for me.

Are you sure you've not set some GPOs in Windows at some time?

If you can show that Secure DNS is always enabled by default in a clean install (i.e. no profiles) that would be a serious bug and you should report it. Easiest way to test would be to install as a standalone version.
https://vivaldi.com/bugreport/

killermiller

@Pathduck
im pretty sure. the screenshot is from fresh install of the standalone snapshot version
unfortunately chrome settings url is not working in android, but if you see my posts above its pretty obvious its activated there as well (still see the ads there)

derDay

@Pathduck
the screenshot above from killermiller shows the exact configuration at my system, so I think too, that this is the (new?) default setting

killermiller

raised VB-75137

rseiler

@Pathduck said in DNS in vivaldi 3.5:

@killermiller I can't test this because I use some GPOs set globally so the option is disabled for me.

As mentioned, it is is for me too, but I've only set one GPO for Vivaldi, and it's unrelated to that.

Which one have you set that you think it is?

killermiller

I think it might be because I use google DNS as my fallback
so I assume router is not responding to DNS querys :853? so it tries the secondary DNS and google is

rseiler

I just did a fresh 3.5 (x64) in a Win10 VM:

And DNSleaktest.com (standard test) shows:

IP Hostname ISP Country
162.158.105.10 None Cloudflare

This is not the case on the host system where the setting is grayed out. It shows my ISPs DNS there.

Pathduck

@killermiller Holy **** I think you're right. I removed the GPOs I had set and the Secure DNS setting was enabled set to "Current Service Provider".

Apparently since I've set my OS to Router, then Cloudflare (primary 192.168.0.1, secondary 1.1.1.1), Vivaldi now starts to use its secure DNS (162.158.221.21) instead of my router.

This is bad... really really bad

rseiler

@Pathduck Yes, here the OS is set to the router...and the router has 1.1.1.1 as the primary....

Catweazle

I use 9.9.9.9 and 1.1.1.1 as secundary

Pathduck

@rseiler And what's your secondary on the OS?

In your case if your secondary is not set, then AFAIK the browser should not be able to "guess" what provider you need for Secure DNS. Unless your router provides it, which I doubt.

Since Secure DNS traffic is just HTTPS it might be tricky to sniff where the browser requests DNS from. I found this online service: https://browserleaks.com/ip (scroll down to DNS)

I'm really unsure of the details on how secure DNS works, which is my biggest problem with it. I want to control what the browser uses, not leave it up to some muppet developers (Chromium, not Vivaldi...) DNS resolution belongs in the operating system NOT the browser

Catweazle

@Pathduck , I also use DNScrypt

Pathduck

@Catweazle said in DNS in vivaldi 3.5:

@Pathduck , I also use DNScrypt

Exactly. With DOH enabled in Chromium/Vivaldi I suspect it would not be used at all.

rseiler

@Pathduck On both the host and the VM, I'm just using DHCP, so there are no static settings. I shouldn't have said that the "OS is set to the router" because that made it sound like it was a static assignment. Via DHCP, the OS is acquiring its IP info from the router.

The secondary DNS on the router is 1.0.0.1, so also Cloudflare. The third one isn't.

Pathduck

@rseiler And what's the primary and secondary on the OS set to from DHCP? Same as the router? I'm just wondering how Chromium manages to "guess" what your "current provider" is.

Catweazle

@Pathduck , with money?

rseiler

@Pathduck That information is never revealed when using DHCP as far as I've ever seen. ipconfig /all just shows 192.168.1.1.

gavro

@killermiller Thank you for finding the weirdly hidden chrome setting!

I thought I was going crazy as to why I could not disable DoH in Vivaldi (and why it was on in the first place!) after the update to 3.5... Not being able to open local network sites, pointed to by a local DNS (with proxy for other requests) was a no go with this setup.

maraka

@killermiller Thanks also from me, I try find the issue whole week I think this should be fixed in Vivaldi!