zlacker

>>beezle+(OP)
I have a feeling that MS is playing with fire again....

That every request made through the edge browser for a non local user is associated to his/her live ID is pure coincidence ;)

Sometimes when I look into my dns logs, I cry a little bit inside too.

>>jhoelz+xa
That's the moment you fire up Firefox without prefetch nor studies and enjoy the peaceful DNS logs without the constant telemetry calls to LinkedIn and to all interested 3rd parties, five eyes etc

>>Datage+8q
i thought that too!

but firefox has different dns requests going to their servers as well.

>>jhoelz+ts
On linux you can use IceCat. On windows, download simplewall and block pingsender.exe there. Should get rid of the queries if you combine it with userjs tweaking.

>>no_tim+W01
Just setup pihole - you can run it on any server and use it as a local dns server. Probably somebody else has done the work to list these spammy domains.

>>callam+sd1
What about DNS over HTTPS?

>>paulry+9j1
If you just want FF to not use it you can block "use-application-dns.net" which acts as a canary domain for it to disable DoH.

If you want to block it from things you don't trust to have such methods (or always listen to them) you'll have to upgrade to a firewall that can filter outbound connections to IPs the client hasn't received a DNS response for or require use of an explicit HTTP proxy for outbound connectivity.

Just blocking DNS can be a good middle ground for reasonable effectiveness without as much effort.