> On Android:
Most phones nowadays should have DoT support built-in nowadays.
Most phones nowadays should have DoT support built-in nowadays.
DoT does help even if it can be trivially blocked (more than one way to do so, but blocking TCP on port 853 would do the trick)... DoT cannot help bypass SNI-based censorship (unless apps implement domain-fronting).
Indeed, and this is exactly why DoH is better than DoT.
> DoT cannot help bypass SNI-based censorship (unless apps implement domain-fronting).
TLS ECH will. I can't wait for it to become mainstream.
Android calls it "Secure DNS". It's in the connection settings, I believe starting from Android 9 or 10.
Most Android phones... have DNS over Tor... built in? This can't be, can it? I'm pretty confused.
Android ≥ 9 natively supports DNS over TLS: https://android-developers.googleblog.com/2018/04/dns-over-t...
So does iOS ≥ 14: https://developer.apple.com/documentation/networkextension/d..., https://support.quad9.net/hc/en-us/articles/360057889591-Set...
The link you’re referring to, https://github.com/celzero/rethink-app, supports DNS over Tor, but does not call it “DoT”. It does not support DNS over TLS (https://github.com/celzero/rethink-app/issues/441), and it is not something that phones have built-in.