Windows 10: Windows 10 Insiders can now test DNS over HTTPS

Brink · May 13, 2020

If you have been waiting to try DNS over HTTPS (DoH) on Windows 10, you're in luck: the first testable version is now available to Windows Insiders! If you havenât been waiting for it, and are wondering what DoH is all about, then be aware this feature will change how your device connects to the Internet and is in an early testing stage so only proceed if youâre sure youâre ready. Having said that, if you want to see the Windows DoH client in action and help us create a more private Internet experience for our customers, here is what you need to do:

First, make sure your Microsoft account is part of the Windows Insider Program. If you know you are already a Windows Insider, make sure you are in the Fast ring and go to Step 2. If not, go here and follow the instructions for the Fast ring so you can get the latest Insider Preview build.

Once this is done, run Windows Update, reboot, and verify youâre running Build 19628 or higher. You can do this by clicking here or by going to the Settings app -> System -> About.

Once you know your Windows install has our DoH client, we need to activate it. You can do that by:

Opening the Registry Editor

Navigate to the HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Dnscache\Parameters registry key

Create a new DWORD value named âEnableAutoDohâ

Set its value to 2

Please note: the registry keys and values described here are only for enabling DoH client testing on Insider builds. When the DoH client is made available in general release builds, registry configuration of DoH will not be supported.

Now that the DoH client is active, Windows will start using DoH if you already have one of these servers configured:

Server Owner Server IP addresses Cloudflare 1.1.1.1
1.0.0.1
2606:4700:4700::1111
2606:4700:4700::1001 Google 8.8.8.8
8.8.4.4
2001:4860:4860::8888
2001:4860:4860::8844 Quad9 9.9.9.9
149.112.112.112
2620:fe::fe
2620:fe::fe:9
You can configure Windows to use any of these IP addresses as a DNS server through the Control Panel or the Settings app. The next time the DNS service restarts, weâll start using DoH to talk to these servers instead of classic DNS over port 53. The easiest way to trigger a DNS service restart is by rebooting the computer.

To add a DNS server in the Control Panel:

Go to Network and Internet -> Network and Sharing Center -> Change adapter settings.

Right click on the connection you want to add a DNS server to and select Properties.

Select either âInternet Protocol Version 4 (TCP/IPv4)â or âInternet Protocol Version 6 (TCP/IPv6)â and click Properties.

Ensure the âUse the following DNS server addressesâ radio button is selected and add the DNS server address into the fields below.

Now that you have Windows configured to use DoH, you should be able to verify itâs working by seeing no more plain text DNS traffic from your device. You can do this by using Packetmon, a network traffic analyzer included with Windows.

Start by opening a new Command Prompt or PowerShell window. Run the following command to reset any network traffic filters PacketMon may already have in place.

pktmon filter remove

Run the following command to add a traffic filter for port 53, the port classic DNS uses (and which should now be silent since weâre only using DoH).

pktmon filter add -p 53

Run the following command to start a real-time logging of traffic. All port 53 packets will be printed to the command line. If your device is only configured with DoH servers, this should show little to no traffic.

pktmon start --etw -l real-time

If youâre trying to test a DoH server that isnât already on our auto-promotion list, such as your ISPâs DoH servers, you can add it to our list manually using the command line. First, identify the IP address and the DoH URI template for the server you want to add. Then, run the following command as an administrator:

netsh dns add encryption server=<your-serverâs-IP-address> dohtemplate=<your-serverâs-DoH-URI-template>

You can verify the template was applied to the well-known DoH server list by running this command, which should show you the template being used for a given IP address:

netsh dns show encryption server=<your-serverâs-IP-address>

Now when Windows is configured to use that IP address as a DNS server, it will use DoH instead of classic DNS.
Click to expand...

Source: https://techcommunity.microsoft.com/...s/ba-p/1381282

:)

the54thvoid · May 13, 2020

Windows 10 DNS leak

Did you just manually set your DNS server to google DNS or similar?
Click to expand...

No, went with a different 3rd party suggestion. Works better. I'm reliant on others for my tech needs that way.

MrGenius · May 13, 2020

Windows 10 RTM/Build 10240 now available for Insiders

Insiders in the fast and slow rings are now being distributed the latest Windows 10 RTM (build 10240).

http://blogs.windows.com/bloggingwi...-for-windows-insiders-in-fast-and-slow-rings/

But for those wanting to expedite the upgrade, and/or download the latest build in iso form, it can be downloaded for free from the following link.

http://getintopc.com/softwares/oper...-pro-build-10240-iso-32-64-bit-free-download/

Don't forget to check out the activation steps found here:

Spoiler slmgr /ipk W269N-WFGWX-YVC9B-4J6C9-T83GX
slmgr /skms kms.xspace.in
slmgr /ato

Windows 10 Enterprise - NPPR9-FWDCX-D2C8J-H872K-2YT43B8YKP-D69TJ
Windows 10 Home - TX9XD-98N7V-6WMQ6-BX7FG-H8Q99
Windows 10 Professional - W269N-WFGWX-YVC9B-4J6C9-T83GX

use the key you need for the build and run those lines in cmd to activate

activation
I suggest running those commands as administrator. Just in case.

Enjoy!

newtekie1 · May 13, 2020

faster dns?

Google's dns servers are horribly slow for me. Like said in the post above use the GRC's | DNS Nameserver Performance Benchmark and see which is fastest.
Click to expand...

That is a great tool, but make sure you do the ~30 test to make a custom DNS server list first, then use it to find the fastest out of those.

Windows 10: Windows 10 Insiders can now test DNS over HTTPS

Windows 10 Insiders can now test DNS over HTTPS

Windows 10 Insiders can now test DNS over HTTPS

Windows 10 Insiders can now test DNS over HTTPS

Windows 10 Insiders can now test DNS over HTTPS - Similar Threads - Insiders test DNS

DNS over HTTPS in Windows 11

DNS over HTTPS in Windows 11

DNS over HTTPS on Windows 10

Enabling DNS over https in Edge

How to enable and test DNS over HTTPS in Windows 10

How to enable and test DNS over HTTPS on Windows 10 devices

DNS over HTTPS?

Microsoft will integrate DNS over HTTPS in Windows 10

DNS over HTTPS with Firefox