[fChk]

DNS-over-HTTPS (DoH) protocol improves security, performance and users privacy by letting people chose the name-server they want. In fact, DoH hides DNS queries inside regular HTTPS traffic thus any third-party 'sniffer' won't be able to see the DNS queries users are running thus inferring what websites they are about to visit; hence the security and privacy aspect of it.

Firefox had (in 2017) the brilliant idea to start implementing it natively and with version 70, the feature is fully functional but still not enabled by default (read this article for more: What’s next in making Encrypted DNS-over-HTTPS the Default).

>> A little personal note on this:
I recently changed my ISP to an "underdog" company which happens to have a good 4G-LTE coverage in the different areas where I need it. But to my dismay, I've found that they are filtering out port 53 in such a way that any DNS query to any external nameserver (except theirs of course) is blocked!!!..

I'm aware that there are 2/3 ways to circumvent this, using a VPN, SSH-tunneling, port-forwarding... and DNS-over-HTTPS.

But When I learned about Firefox shipping DoH, I immediately enabled it thus improving the latency/performance (my new ISP DNS server is really that crappy), the Web browsing privacy ISP-wise (letting Cloudflare build that profile instead, for now. )

Now, how you can enable DoH in Firefox; 2 ways:

> about:preferences  -> Network Settings -> Enable DNS over HTTPS (check)
> about:config
                    -> network.trr.mode (2)
                    -> network.trr.uri
                    -> network.trr.bootstrapAddress

See the Mozilla blog article for more on those settings or just see here.