Private DNS Automatic or off? If a vpn is used.

tchick

Does it make any difference?
What is the best practice?
Does it make a difference when a second user profile is used?

Thank you very much in advance,

goskm75f

tchick
https://protonvpn.com/support/dns-leaks-privacy

GrapheneOS

tchick For now, we recommend disabling Private DNS if you use a VPN in any profile. This advice can change in the future when we've thoroughly checked to make sure it works the way it should. However, even then, you should use the VPN provider's own DNS if you want to blend in with other users of the same VPN. Services can see which DNS resolver you're using.

lcalamar

I don't use VPN (except to access my internal network when external).
But I DO use NextDNS.

At home my router is setup to use NextDNS.

When I am external then I use the Private DNS settings on my phone.

I don't keep the private DNS active all the time as there are instances where I need to bypass NextDNS due to it blocking something...

Stewart

GrapheneOS If you're using a VPN, you'd better uncheck "Use secure DNS" in Vanadium too, if I understand correctly?

DeletedUser34

GrapheneOS I would like to know too, if we should disable Secure DNS in Vanadium then also?

GrapheneOS

Stewart DeletedUser34 Private DNS currently interacts badly with VPN usage in secondary profiles, which doesn't apply to the app-based implementation of DNS-over-HTTPS in Vanadium. You probably want to be using the VPN provided DNS when using a VPN, so you probably don't want to explicitly configure another provider for either of these feature regardless. The default automatic mode for either is only meant to use the network-provided DNS via DoT/DoH when available. Private DNS does not interact properly with secondary user VPN configurations, which can't happen with apps.