DNS over TLS

Apologies I know it's been mentioned before, but I'm in the process of moving from pfsense + to XG Home. Got a variety of loose ends to sort out and DNS over TLS is one of them. Is this forthcoming within the v21 release cycle?

I'm sorting Wireguard out via a virtual machine hosted within my home DMZ. Additional Let's Encrypt certs I'll either generate from a linux machine or ditch and get a cheap wildcard cert to cover most items or I'll stand up and internal CA, but will have to install the cert on end devices.

Top Replies

alan weir 18 hours ago +1

I asked about this a while ago also. I don't think DNS over TLS or even DNS over HTTPS is on the roadmap. It seems it's due to Sophos having their own DNS service which requires a subscription. It is a…

Parents

0 LuCar Toni 2 hours ago

Sophos is following up with DoT in Sophos DNS Protection as well.
Something we are keen to implemented.

Sophos DNS Protection

Does the DNS Protection support DNS over TLS and DNS over HTTPS?

DNS Protection is only available for business customer - not for Home, as the home license is excluded from the licensing system.
This may change in the future.

To be honest - Most home users have other techniques running anyway: So business customers using techniques like Sophos DNS, while home customers running PiHole or other systems, made it not to the priority number 1 on the firewall roadmap - but on the DNS protection roadmap.

__________________________________________________________________________________________________________________
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel

Reply

0 LuCar Toni 2 hours ago

Sophos is following up with DoT in Sophos DNS Protection as well.
Something we are keen to implemented.

Sophos DNS Protection

Does the DNS Protection support DNS over TLS and DNS over HTTPS?

DNS Protection is only available for business customer - not for Home, as the home license is excluded from the licensing system.
This may change in the future.

To be honest - Most home users have other techniques running anyway: So business customers using techniques like Sophos DNS, while home customers running PiHole or other systems, made it not to the priority number 1 on the firewall roadmap - but on the DNS protection roadmap.

__________________________________________________________________________________________________________________
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel

Children

No Data