Hacker News Reader

You can use DNSCloak[1] for this. It runs a local DNSCrypt client and acts as iOS VPN. You can run your own DoH server that blocks tracking domains, or use a public DoH server that does, or use a well-known provider that provides DoH (e.g. Cloudflare DNS, Google DNS and OpenDNS does) with your own blacklist[2]

[1]: https://itunes.apple.com/us/app/dnscloak-dnscrypt-doh-client...

[2]: https://itunes.apple.com/us/app/dnscloak-dnscrypt-doh-client...

> You can run your own DoH server that blocks tracking domains

Do you mean your own dns server which will be accessible to (anyone on) the public internet?

That's certainly an option if you want to run public DNS-over-HTTPS server, but you don't have to do that – DNSCloak do provide a way to specify a local blocklist.

DNS-over-HTTPS spec also mentioned that you can use a standard HTTP authentication if you want to run a DOH server but want to keep it private (although I've never tried this)

A do-it-yourself solution is Algo https://github.com/trailofbits/algo Algo has a feature to install ad-blocking for all dns queries.

I doubt. Play Store doesn't allow the full version of Blokada so you need to install it from F-Droid or directly from their web site.