.googleapis.com on dns

coffeedpd

Hi all,

I have recently installed GOS on a P7a. I have set up a second user for Gplay, but on my main profile I have not installed any of the google services. The only app ive downloaded outside of f-droid is Signal, and that was a direct download from their site.

When I check my Next DNS logs I saw: cryptauthdevicesync.googleapis.om, www.googleapis.com, play.googleapis.com, connectivitycheck.gstatic.com (even though i had the gos servers for this), play-fe.googleapis.com, firebaselogging-pa.googleapis.com, mtalk.google.com, app-measurement.com

I was trying to avoid any google related services. I dont understand why all these are showing?

Just to confirm I have not installed GPS, GSF or GPS on main profile.

As a follow up question, what sort of identity (device or personal) is sent with these?

Thanks for your help

other8026

coffeedpd depending on how you set up NextDNS, I'd suspect that's all from the profile with Google Play installed. As you can see from this release, private DNS settings don't show up in secondary user profiles since the setting is global.

You might also see those popping up while you're using your owner profile if the other profile is running in the background.

coffeedpd

other8026 Thanks for the explanation. I wrongly thought that once signed out from other profile that there were no comms or connection from that profile's apps.

GrapheneOS

coffeedpd You're misunderstanding the answer you were given. Nothing from the secondary user is running when it's not logged in. You wrongly believe you're only monitoring DNS requests from your main profile when you're monitoring them from both. Private DNS settings are global, not per-profile like VPN settings. You can use a VPN to control DNS instead of the Private DNS setting and in fact we recommend not using the Private DNS setting if you use any VPN on any profile.

Please also read https://grapheneos.org/usage#app-link-verification which explains how the OS verifies app associations with domains by default instead of trusting what apps claim. None of the connections you're listing above is related to app link verification.

coffeedpd

GrapheneOS Thank you for the reply. Yes my understanding is limited.