Enable This Setting on EVERY Web Browser

Did you know about this feature?
⇒ Become a channel member for exclusive features! Check it out here: kzbin.infojoin
Links:
• DNS Test 1 ⇨ www.cloudflare.com/ssl/encryp...
• DNS Test 2 ⇨ 1.1.1.1/help
• Configuration Profiles: github.com/paulmillr/encrypte...
▼ Time Stamps: ▼
0:00 - Intro
2:59 - Before Getting Started
3:44 - Enabling on Web Browsers
4:56 - On Android
6:32 - On iPhone & iPad
9:35 - On Mac
10:35 - On Windows
11:13 - What is ESNI & ECH?
▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬
Merch ⇨ teespring.com/stores/thiojoe
⇨ / thiojoe
⇨ / thiojoe
⇨ / thiojoetv
My Gear & Equipment ⇨ kit.co/ThioJoe
▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬

[@KiickrOcksz]

He's so powerful. He can slide buttons with his fingers no mouse required.

[@hridinsbiju9023]

Haha

[@larsthestorf5630]

Very impressive technology. I believe it is called touchscreen

[@KiickrOcksz]

@@larsthestorf5630 There's no screen behind him. He literally pulled the image out of the PC to slide the button and put it back. Catch up.

[@Tahazif_TheCool22]

@@KiickrOcksz yes.

[@darrelbryant8632]

He's had wizard training.

[@slindebe]

A few comments: 1. DNS lookups should preferably be done by the network stack in the operating system, not by the application, such as a browser. It might cause that different applications on your computer to connect to different IPs for the same site due to different IPs being returned by the DNS used by the browser and the DNS used by the OS. 2. So your ISP can't just look at your secure DNS requests to see what sites you're connecting to, but instead, Cloudflare gets to see all DNS your requests, so who to trust? 3. Some companies/organizations etc, use special domains and/or names for internal resources that are not resolvable by an external DNS provider like Cloudflare, so you might no be able to access them. Cloudflare's main business is hosting sites and data for other companies, accessible with high performance and protection from DDoS attacks globally. Using dynamic DNS resolvers that map a name to different IP addresses based on network and system load, your location, location of data needed to serve your request, and so on, is an important part of that service. Might they have additional motives to see as many DNS requests as possible? Let's say Bank A is a Cloudflare customer, would they be willing to pay for data on DNS requests for Bank B from a certain region for example? Of course, they would! I'm not saying that Cloudflare does it today, but we all know that there is immense value in data regarding customer behavior.

[@jakobfel2]

I'd say running your DNS requests through Cloudflare, a company with a pretty decent track record in regards to privacy, is a lot smarter than running it through your ISP's DNS servers, especially since most major ISPs are known to be doing anything they can to spy on their users and then sell their data. Is it a perfect solution? No, especially not if Cloudflare ever decides to go crooked, but like I said, it's better to go through a service run by a company with a good track record than go through a service run by an ISP that is almost certainly trying to sell your data.

[@Rundik]

Cloudflare can already read all the data unencrypted for all its customers. And it's quite a big prercentage of websites who are using cloudflare. So dns is not that big of a deal

[@smft9147]

who else misses the poll feature lol, I remember all his videos had a stupid poll at the beginning...

[@GoatStormChaser]

Yeah i do

[@flop-00]

wait it was REMOVED? i thought ppl just hardly used it

[@ThioJoe]

Yea it's a shame

[@yeppiidev]

@@flop-00 it was removed a long time ago

[@Househoppper]

I didn’t know they were removed, I just thought it was a mistake when people said “You can vote in the poll” and there is no poll

[@wvcaver774]

been doing DNS over TLS for a while at the router level

[@SiddarthMalik]

How??? Please share

[@Tarucz]

Xd

[@TheGoldenBat]

Thank you for splitting the spands of the video up to different chapters, this makes it allot easier.

[@wizdude]

Reason number 3: some countries like Australia have “metadata logging laws” where your ISP logs headers of your traffic and thus knows which websites you are visiting when you make requests via standard unencrypted DNS. If the DNS lookup is encrypted then this makes it harder for a third party (government, law enforcement etc) to track your browsing activities.

[@Tmm42s]

I run a small ISP, we don’t log headers of traffic if the customer has a public IP. Only ISPs using CGNAT where the end user has a private ip need their source, destination and port accessed logged

[@svsilentpartner647]

Yes they won't see your DNS traffic but they will see the ip address of the website you connect to. So it's not really stopping them. Only way I see is to use tor or vps/vpn/proxy. They will see the connection but have no information about specific activities.

[@mikeeleren9816]

been using private dns a year already, so far so good it also improves my connection

[@Harvestersz]

I do this the most secure method: I handwrite each DNS request, put it in an envelope, mail it, and wait for the reply.

[@purpmint3116]

Government can read your mail! Oh no!

[@davidwallin7518]

That's a silly way - you should be using smoke signals. And they should be in encoded Klingon.

[@acidangel111]

I use a track and field hamster team to courier those envelopes myself ..... those hamsters are a moving...!!!!

[@white-bunny]

The ping must hit negative time then!

[@SS-ec2tu]

@@davidwallin7518 So many people know Klingon now, you have to encrypt it to be safe.

[@meowxgamingstuff]

Bro I am one of your old subscribers... I always liked each videos of yours. Always learnt something new! You are so easy to understand. Massive respect.

[@meowxgamingstuff]

He didn't see my comment 💔

[@R1ch4rd]

@@meowxgamingstuff He doesn't have to. Plus, he has stuff to do. Don't be offended.

[@linr3v730]

Thanks, bro.

[@shootingenthusiast8]

I love the way he tries to dumb things down so even I can understand them. It didn't work, but I still appreciate the effort.

[@maineglass8104]

Very good cursory discussion on the why this information is important. The browser demonstrations that you provided were easy to follow. Love that this video was short and got to the point.

[@Pedro5antos_]

Great, great tips! I had never heard of it, thanks Joe

[@AbdRahman-px7uq]

Thank you for the helpful information & tutorial!

[@davidfreedman6039]

thiojoe thank you for teaching us really good tips for windows! cant wait to see u get 3m subs!

[@Kaushtav14]

Nice vid. It was very helpful. Thanks 👍🏻👍🏻

[@ksriharsha2911]

The best youtube channel.....thanks joe for sharing valuable knowledge :)

[@_SJ]

Wow!! I'm so happy that I'm in this video. Thank you ThioJoe

[@usernameyoutuber]

10 hours ago...

[@linr3v730]

How?

[@usernameyoutuber]

@@linr3v730 the video was unlisted

[@dikshantnamdeo]

@@linr3v730 He is a member

[@Z_A765]

Lol 10 hours ago😂🤔

[@vladislavkaras491]

Pretty informative and usefull video. Thanks!

[@radaplay]

Nice video Joe keep up the good job

[@UpStreamCharlie]

Thank you very much for this video. I learned a lot today. It's a good thing I have a new Samsung. I followed your instruction for it. Thanks, ThioJoe.

[@alwinanilkumar2625]

I just set my private dns in phone with cloudflare Love this video❤️

[@anshulhedau10]

Me: So many work to do. ThioJoe: *new video*. Me: watches video anyway 😁.

[@parinose6163]

Thx you for clarifying this cdn affair and others! You are right: "certainly, more knowledge than you are bargaining for..."

[@ShookD]

Very informative, Thanks!

[@Chanceux2]

You deserve more views :(

[@eftiprwtopapadakis9310]

Amazing channel! i have seen already your ssd failure video and this one and i can say that i am so benefited. Btw what about Linux machines?

[@joegee2815]

I just checked my firefox and it's already enabled. Nice.

[@AndiDarmika]

Super helpful, especially for iOS. thank you 😃

[@R1ch4rd]

6:00 There is actually another hostname for this, 'one.one.one.one', so you don't have to remember that long hostname.

[@orang6521]

ok lemme save this real quick

[@derpyKitsu]

The long one kept giving me errors, but this one is actually working

[@R1ch4rd]

@@derpyKitsu glad to help. 👍

[@vivekd005]

Yeah same, one given in the video giving me error too. Yours is working but on the DNS test Page it is still showing Not Secured

[@barradarcy]

Thank you, your videos are always so informative! Unfortunatly I came across this one too late as esni has been pulled from Firefox-esr and replaced with something else (which seems to be incomplete). There's now no protection for SNI....unless you know something I don't and I'm pretty sure you DO! 🙂

[@Articulate99]

Always interesting, thanks.

[@frzdytheconsumer8094]

Thanks Thio! I'm one step closer to getting my pc to *MAXIMUM* power.

[@aleksanderblinn4492]

Comodo Firewall with cruelsister settings Bitdefender AV O&O Shutup10

[@Emily-gf3we]

Thanks, Thio for this video it's really useful.

[@lomarica]

Thank you for the information!

[@AnirudhAnil7]

Thanks, these are pretty useful

[@Yadro767]

Great content as always.

[@rondelarosa7985]

Thank you, your vids help alot.

[@mygunplabuildbyrodnycp3730]

thanks bro..more power to your channel

[@defyiant]

Thanks for this wanted cloudflare on my iPhone

[@stevecmk]

Thank you for the video!

[@SA77888]

I do this in Control Panel which gives a....'global effect' to this setting rather than effecting just one browser. It can also be changed in Settings under Network & Internet \ Ethernet - then click on Edit next to DNS Server assignment

[@EvilMonkeyZombie]

Is there any benefit to doing both? I have a private DNS setup on my network adapters.

[@starrie_eyed_girl7397]

Good vid thanks for the info

[@Ninjukken]

the video came out 16 minutes ago? this dude gone in the future and commented fr 😂💯

[@ThioJoe]

They got secret illuminati access

[@GrayLeaf]

@@ThioJoe 😂

[@StuckInVim]

Really useful!

[@GoatStormChaser]

Very nice video explained everything well

[@ntroprogaming3234]

man i like all ur videous thnks for these things

[@blob6371]

Thanks so much for the info

[@furkan9549]

What is the difference between changing DNS from WI-FI setting and chancing from browser or system settings.

[@R1ch4rd]

If you set DNS up on your router, all devices in the local network will use the same DNS. If you set DNS up on your browser, it will only use the DNS on your specific browser. If you set DNS up in the settings of your phone, it will use the DNS in all apps system-wide, but only and only on this particular phone.

[@mrawesome7713]

Great vid Theo

[@Blindleoblake66]

Thank you Joe !

[@sparkleshyguy85]

Just a note to anyone doing this for iOS or iPadOS: You must do this in Safari, not in your preferred browser for the profile to be acknowledged by the system. Otherwise it’ll just downlload but won’t show up in Settings.

[@eeevans]

Also the Profiles setting doesn’t show until you have it downloaded in safari

[@Enjurin]

Great video!

[@i_am_blur]

Did it. I trust you man. Thanks.

[@link1565V2]

I have AdGuard DNS configured directly on my router. Greatly increases my connection speeds by automatically blocking spammy ad URLs from loading at all on my network.

[@hafuridotus]

Just setup NextDNS on my router and it's been flawless, ended up paying the $20 yearly fee because I easily topped out at the 300,000 queries mark

[@geekhomeworld4248]

What a fascinating video.

[@domg7124]

Great channel, wish u had more mac stuff

[@SnowyRVulpix]

I wish I could upvote this more than once.

[@FalB27]

"Wu Tang Lan" killed me

[@louf7178]

Very informative. Thank you ! Edit: uh...yea, I got lost. Hackers may intercept where you're going by reading an unencrypted name - I don't think it will ever be secure; just very, very complex.

[@jkbobful]

good video Quad9 is also another good one even better than Cloudflare when it comes down to security

[@akash2364]

Thanks bro

[@imamal74]

Thx a lot for this vid!!!!

[@Midori_Hoshi]

It was already enabled on my Firefox browser, but thanks for the heads up.

[@prashantdeshpande5415]

Very useful👍

[@dcypher5305]

I’ve heard that people won’t use HTTPS for DNS due to the fact that it forces your browser to resolve to a big-scale DNS rather than more local ones

[@reeshavroy0]

Thank You Sir. 💥💯

[@arkasingha6111]

Damn good video. Keep it up.

[@_SJ]

I was waiting for this video but I fell asleep 😞. It's 12:30am here in the Philippines

[@Szklana147]

Thanks!

[@akash2364]

Nice one

[@nothingiseverperfect]

Ahhh this video is so good thnx u

[@antunklaic9943]

Thank u Man, u are Great.

[@MetalKingdom666]

Thanks Man .you amazing.

[@shmookins]

I changed it like you mentioned but the test site still gives me a question mark for Secure DNS.

[@dhiyaneshwarchess12Pro]

Hlo bro! You are my hero of computer science🖥️💻😊😊😇😉

[@bobjohnson5934]

To Enable DNS over HTTPS (DoH) on the Opera Browser, Click on the Opera icon to open the browser's menu, Pick Settings from the menu, In Settings, click on Advanced On the right, scroll down to the System section. Turn on the option Use DNS-over-HTTPS instead of the system's DNS settings.

[@PrograError]

seems to me if your router had already set to a version of the "DNSS", the handshake check gives false negative ( or if you have a another app like say a app manager app with a VPN, it also happens the same. disabling that VPN gives a postive)

[@light-gray]

Thio joe is the best youtuber ever

[@ThioJoe]

I am one of the youtubers of all time

[@antonioterrell354]

Turned DoT on for cloudflare in my router which has the option (The router node of an Asus XT8 mesh system). Cloudflare's browsing check says everything is secure except for the "Secure SNI" as mentioned near the end of the video. From my understanding this should work fine as long as the web browsers of each client on my network specifically direct all DNS queries to the router.

[@BillAnt]

SNI is not yet supported by many routers and servers, however as long as your DNS is secure you should be fine.

[@Tntdruid]

I run my own, done that for many years now 😀

[@cammy85]

One thing to note: it won't work in Edge if you use tools like O&OShutup10 to configure Windows 10 privacy. I just enabled the DNS in my router instead. 2023 edit: For those who don't already know, Windows 11 sets DNS over TLS separately from Edge so you can just enable it there. In most cases, just add the DNS numbers, choose "On (automatic template)", and you're good to go.

[@AndroidClima]

Muchas gracias por el gran tutorial. Pero me quede en duda. Si es posible hacer una configuración del DNS del Router de la casa... podrías ayudarme con mi duda por favor...

[@aniketdive7069]

Owesome bro

[@OlettaLiano]

One thing I like about Firefox. This setting is already enabled.

[@radiorexandy]

Hey ThioJoe: I got the cloud flare dns to work on my Android but am still vulnerable to SNI hacking?

[@cerealkiller69420]

Yes. Ech is still in draft stage and no software supports it. Even Firefox's implementation is currently broken afaik. Your best bet is to grab an older version of firefox for Android with working esni and use that for web browsing

[@John7No]

That is all good and great but I have the following question. I I set the dns of the browser or the device like this, that device will not be able to resolve internal hosts, correct? example it will not see my NAS etc by name.

[@ardentdfender4116]

No pun at all, but of all the channels i watch across many sectors for flavor, education, fun, gaming etc there is pretty much just two that teaches me tech to be better at computer tech and keep learning new stuff i didn't even know. That's Linus and this channel. There is so much stuff to keep keeping up with there is just no way the average person can keep up with just Tech singularly. So cheers to Thio for helping us all to becoming at PC Tech/Tech. I had no damn idea about this browser setting. Thanks man!

[@pax5072]

i bet you have to throw all this tech stuff in dustbin when ar and vr are the really and no buddy use keyboard or touch screen in daily use.

[@rashidisw]

A system wide DoH/DoT for Windows OS are possible, if it would follow upon how DNSCrypt was implemented/deployed for client side.

[@ahqro]

I love you so much joe you are best youtuber you are my uncle❤️❤️❤️❤️😍😍

[@sundayismyname]

Is this similar to using a DNS on the router level? I have an Asus AC88U. There is a WAN DNS Setting under the Advanced Settings - WAN. Would this work the same without configuring individual devices?

[@ctx_12]

Would I need to do this if I already have Cloudfare set at the router level (to point to their DNS) ?

[@helionexus6090]

@5:40 For android; Are you saying to choose 'automatic' then? but if 'automatic' can't be chosen then to choose 'private DNS provider name' instead? You just haven't specifically specified to choose automatic so I'm asking.

[@yousef5137]

Whenever I see a thumbnail with a person putting there fingers on a button or switch. I remember, ThioJoe

[@patrickstar1613]

Good Video

[@Ploskkky]

Do I need to encrypt SNI too? Currently it is not. EDIT: LOL you are already addressing it. Great.

[@praneeth210]

Very important 👍

[@fred-youtube]

Turn off privacy sandbox in chrome settings though so it doesnt send your (slightly anonymised but still gives them a good picture of what you do) browsing data to websites

[@dark_sunset]

What is the cool file thing on the top right of the monitor on your desktop?

[@Everytwo_]

Nobody: ThioJoe: Hearts a comment that says "Hi bro"

[@the_player_2]

UNRELATED TO THE VIDEO.

[@Everytwo_]

@@the_player_2 and?

[@the_player_2]

@@Everytwo_ WHY WOULD YOU COMMENT THIS HERE?

[@Everytwo_]

@@the_player_2 why not?

[@cyangalaxy]

Do you know how this can be set up without losing access to local IP addresses (like Router Interface etc.)?