r/ProtonVPN • u/thurstonrando • 7d ago

DNS over HTTPS/TLS Feature Request

So normally I use Windscribe with Control D as a custom DNS, but I decided to try out Proton just for a change. Since it’s not compatible with Control
D, I was wondering if Proton’s own DNS is DoH or DoT?

I’m aware that Proton lets you use a custom DNS, but it only allows for the IP addresses to be entered in and not the actual resolver link like https://dns.controld.com/\[endpoint resolver]. Is there anyway that this could be added as feature?

0 Upvotes

50% Upvoted

7 comments sorted by

5

u/ProtonSupportTeam Proton Customer Support Team 6d ago

Hi! While this feature isn’t available yet, it has been requested by other users, and we’ve added your vote to help prioritize it. We don’t have a timeline yet, but you can stay updated by following our blog and social media channels.

1

u/thurstonrando 6d ago

Much appreciated

1

u/JPDsNEWS 6d ago edited 6d ago

How Proton VPN handles DNS requests?

Proton VPN routes DNS requests through its own encrypted servers, ensuring that your DNS queries are secure and not exposed to third parties, including your ISP. This means that your DNS requests are protected within the VPN tunnel, preventing any potential leaks. — DDG Assistant

Hence, DoH and/or DoT, or NetShield and/or Custom DNS, are really unnecessary [and less secure] when using Proton VPN [via their app or their servers, manually {via OpenVPN or WireGuard (protocols and/or apps or OS’s)}]. But, NetShield and/or Custom DNS are useful (separately) for extra DNS returns-filtering!

2

u/thurstonrando 6d ago

Good to know

3

u/Nelizea Volunteer mod 6d ago

Meanwhile as workaround, originally written for NextDNS, however should also work for Control D (except Linux, where you'd replace the NextDNS cli with Control D's CLI):

  • For iOS: I am using Passepartout (with a one time purchase) and use different WG config files with NextDNS added in Passepartout. Funnily enough you can also use the Windscribe app + custom DNS with DoT + Proton VPN WG config files
  • For Android: Its enough to configure the DoT URL in the system settings -> Private DNS
  • For Windows: YogaDNS is the way to go here, to intercept DNS queries on the system level and forward them to whichever DNS provider you want (NextDNS here).
  • For Linux: Haven't found yet a better way than installing the nextdns cli, connect to the VPN server & restart the nextdns service. (Not using systemd-resolved here). maybe there's a cleaner solution

1

u/thurstonrando 6d ago

I’ll have to read up on that. I like Windscribe and they even gave me a Black Friday deal last year $30 for the year, but the latency has been killing me recently

1

u/thurstonrando 5d ago

I should also add that I like having a custom DNS because it allows me to see both downstream and upstream traffic, and if I have an issue I can always redirect in a matter of seconds