Related: I've had bad luck with configuration generators for MacOS (OSX) ... somehow the configuration is weirdly tied to a specific network interface and then pukes if you change from wifi to wired ...
... yet at the same time, the "universal" configuration will not work at all ...
I don't understand why, in 2024, we can't have a plain old configuration dialog in OSX that allows the setting of DoH hosts. Why is Apple restricting this to enterprise configurations ?
Once upon a time, I used a background helper to workaround the problem of captive portals by temporarily disabling dnscrypt-proxy dns settings when connecting to Wi-Fi on public networks. If it couldn't reach Apple's www.thinkdifferent.us with the correct content, then it should temporarily disable dnscrypt and show a notification. When it switched back, it would also show a notification. dnscrypt and tor also don't play well with anycast-dependent services like software updates.
I've tried managing wired and wireless interface switching on macOS without luck, and gave up on switching.
At home, I skipped dnscrypt and run unbound on the firewall with DoT upstreams and direct all clients to use it.
Comments
Related: I've had bad luck with configuration generators for MacOS (OSX) ... somehow the configuration is weirdly tied to a specific network interface and then pukes if you change from wifi to wired ...
... yet at the same time, the "universal" configuration will not work at all ...
I don't understand why, in 2024, we can't have a plain old configuration dialog in OSX that allows the setting of DoH hosts. Why is Apple restricting this to enterprise configurations ?
Once upon a time, I used a background helper to workaround the problem of captive portals by temporarily disabling dnscrypt-proxy dns settings when connecting to Wi-Fi on public networks. If it couldn't reach Apple's www.thinkdifferent.us with the correct content, then it should temporarily disable dnscrypt and show a notification. When it switched back, it would also show a notification. dnscrypt and tor also don't play well with anycast-dependent services like software updates.
I've tried managing wired and wireless interface switching on macOS without luck, and gave up on switching.
At home, I skipped dnscrypt and run unbound on the firewall with DoT upstreams and direct all clients to use it.