Secure DNS?

DeletedUser34

Should I turn off Secure DNS in the Browser Settings, if I use Mullvad VPN as my DNS? Or should it stay enabled and at automatic?

FlipSid

DeletedUser34
I left it automatic.
While checking https://www.dnsleaktest.com/ on Mullvad VPN I get the correct DNS server

GrapheneOS

DeletedUser34 Private DNS in the OS should be disabled if you use a VPN in any profile. Secure DNS in the browser has no compatibility issues with a VPN but you might as well disable it. You probably don't want to configure using different DNS servers than the VPN provided ones in general.

DeletedUser34

FlipSid Should there be a Hostname shown? Because it says none, when I check it.

DeletedUser34

FlipSid I had that too, until I did read this from @GrapheneOS
https://discuss.grapheneos.org/d/17109-private-dns-automatic-or-off-if-a-vpn-is-used/4

I think that might mean to turn off Secure DNS in the Browser too, but I'm not sure.

FlipSid

DeletedUser34 it says
31173 Services AB for me while I'm in Mullvad

missing-root

I think this is only correct if you use the VPN in GrapheneOS' default (non-stock) settings where "always-on VPN" and "block connections without VPN" is enabled.

Of you use split tunneling, you need to disable the second option, traffic will not go through the VPN, or at least the app will not tunnel it through the (mostly Wireguard) tunnel.

Not sure if the traffic then goes through the insecure DNS server advertized by your local router.