Do you know what file in firefox stores the url for the dns server?

I think it's set by network.trr.resolvers.

EDIT: deleted nonsense, I really should check before posting...

One thing we do want from anyone who chooses to maintain a package is that you stick with it. It's no good if a package gets into the repo and then nobody updates it when it needs updating.

My personal vision for the sanity package would be to have a debconf dialog that listed all the sane changes and let you pick which ones you wanted. Obviously, there would need to be more than just one item on the list. And I don't want to do the work. I'd rather live without it than have to maintain it.

Another way to do it is with dpkg-divert, which will make a package that replaces a config file in another package. And it tells the package manager what's going on, so your custom changes don't get replaced during an upgrade.  Do you know what file in firefox stores the url for the dns server? (Knowing ff, it's probably a binary file.)

Hmm.

How is the procedure if someone would like to become a maintainer for that package, and he would like to add something like changing the default settings for Firefox?

However, I have been thinking whether Cloudflare even should be in the choice of DNS server if one turns it on. Also whether Google should be (can't remember if it still is) the default search engine.

I know this isn't a "free" vs "non-free" issue, but more of a privacy issue, but helping users make good choices seems to be a part of Devuan's core, and as such perhaps the field should be empty or at least provide a service that truly respects privacy.

I'm not sure if this is "to much", but I think it would fit Devuan well perhaps?

EDIT: upgraded to -current and the setting is the same.

Could mean "Otto changed it to 3, change it to something else if you want DNS over HTTPS"
or "Change what Otto did ("Otto's change") and set it to 3 if you want DNS over HTTPS"

Yes, you're right.

I'm installing OpenBSD in QEMU now to test, back soon.

Could mean "Otto changed it to 3, change it to something else if you want DNS over HTTPS"
or "Change what Otto did ("Otto's change") and set it to 3 if you want DNS over HTTPS"

I think the latter makes more sense given the instructions from the wiki.

Otto changed it from 3, not to 3

The undeadly.org page says "to 3" but I can't find the relevant setting in either all-openbsd.js or the Makefile.

¯\_(ツ)_/¯

^ Well that is interesting, I though I had misunderstood the network.trr.mode options but it seems otto@ has set it to "3" in OpenBSD, which would still use CloudFlare for portal detection and telemetry.

DoT ftw!

Well, that's confusing. The way I read it, Otto changed it from 3, not to 3, and that way the log message makes sense. But I just downloaded firefox from mozilla, and it's set to 0 by default there. (amd64 linux version). So which did Otto really do?

DoT ftw!

It looks like trr is turned off by default. I'm looking at ff-esr 68.4 in beowulf.
network.trr.mode;0

However, if you turn it on, you'll get cloudflare. This value can be modified. I haven't tried it.
network.trr.uri;https://mozilla.cloudflare-dns.com/dns-query

To turn it on, they say to go into Preferences, Network Settings, and then way down at the bottom is a checkbox to turn on DNS over HTTPS and a place to enter a different server.

Thanks for the info.

https://wiki.mozilla.org/Trusted_Recursive_Resolver

I was wondering if you guys are going to patch Firefox like OpenBSD has done so that it doesn't default to DNS over HTTPS?

https://undeadly.org/cgi?action=article … 0911113856

With the agreement between Mozilla and Cloudflare, I think it's a really good idea not to have this enabled by default, and also to remove any default DNS servers so that the user provides his own.

Kind regards