Back to Knowledge Base
Quick Configuration Endpoints
DNS over HTTPS
https://xyz01-srv.unrulycitizen.com/dns-query
DNS over TLS
xyz01-srv.unrulycitizen.com
Chrome Secure DNS Configuration Methods
Method 1: Built-in Settings (Chrome 83+)
1
Open Chrome Settings
Click the three-dot menu (⋮) → "Settings"
2
Navigate to Privacy & Security
Click "Privacy and security" in the left sidebar → "Security"
3
Enable Secure DNS
Scroll to "Advanced" section → Toggle "Use secure DNS" to ON
4
Configure Custom Provider
Select "With custom" and enter:
https://xyz01-srv.unrulycitizen.com/dns-query
5
Apply Settings
Settings are saved automatically. No restart required.
6
Verify Configuration
Visit chrome://net-internals/#dns to verify Secure DNS is active
Method 2: Command Line Flags
Launch Chrome with command line arguments for automated deployment:
# Basic Secure DNS with Custom Provider
chrome --enable-features="dns-over-https
DoH Modes: automatic (default), secure (DoH only), off (disabled)
Method 3: Group Policy & Enterprise (Windows)
Configure Chrome via Group Policy for enterprise environments:
Group Policy Settings
# Download Chrome ADMX templates from:
# https://dl.google.com/dl/chrome/admin/admx/
# Configure these policies:
- Secure DNS mode: "Enable secure DNS mode"
- Secure DNS templates: "Configure secure DNS templates"
- Template URI: "https://xyz01-srv.unrulycitizen.com/dns-query"
# Registry path for manual configuration:
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Google\Chrome]
"DnsOverHttpsMode"="secure"
"DnsOverHttpsTemplates"="https://xyz01-srv.unrulycitizen.com/dns-query"
Registry Configuration
Windows Registry Editor Version 5.00
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Google\Chrome]
"DnsOverHttpsMode"="secure"
"DnsOverHttpsTemplates"="https://xyz01-srv.unrulycitizen.com/dns-query"
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Google\Chrome\Recommended]
"DnsOverHttpsMode"="secure"
"DnsOverHttpsTemplates"="https://xyz01-srv.unrulycitizen.com/dns-query"
Save as .reg file and run as Administrator
Method 4: macOS & Linux Configuration
Platform-specific configuration methods for macOS and Linux:
macOS Configuration
# Create Chrome preferences plist
sudo defaults write com.google.Chrome DnsOverHttpsMode -string secure
sudo defaults write com.google.Chrome DnsOverHttpsTemplates -string "https://xyz01-srv.unrulycitizen.com/dns-query"
# For Chromium
sudo defaults write org.chromium.Chromium DnsOverHttpsMode -string secure
sudo defaults write org.chromium.Chromium DnsOverHttpsTemplates -string "https://xyz01-srv.unrulycitizen.com/dns-query"
# Launch with flags (alternative)
open -a "Google Chrome" --args --dns-over-https-servers="https://xyz01-srv.unrulycitizen.com/dns-query"
Linux Configuration
# Create desktop file with flags
sudo nano /usr/share/applications/google-chrome-doh.desktop
[Desktop Entry]
Version=1.0
Name=Google Chrome (DoH)
Exec=google-chrome-stable --enable-features="dns-over-https> ~/.bashrc
Method 5: Chromium-Based Browsers
Configuration for other Chromium-based browsers:
Microsoft Edge
# Edge Settings path:
edge://settings/security
# Group Policy for Edge:
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Edge]
"DnsOverHttpsMode"="secure"
"DnsOverHttpsTemplates"="https://xyz01-srv.unrulycitizen.com/dns-query"
# Command line:
msedge.exe --enable-features="dns-over-https" --dns-over-https-servers="https://xyz01-srv.unrulycitizen.com/dns-query"
Brave Browser
# Brave Settings path:
brave://settings/security
# Command line:
brave.exe --enable-features="dns-over-https" --dns-over-https-servers="https://xyz01-srv.unrulycitizen.com/dns-query"
# Flags page:
brave://flags/#dns-over-https
Opera Browser
# Opera Settings path:
opera://settings/security
# Command line:
launcher.exe --enable-features="dns-over-https" --dns-over-https-servers="https://xyz01-srv.unrulycitizen.com/dns-query"
# Flags page:
opera://flags/#dns-over-https
Secure DNS Mode Reference
Off
Secure DNS completely disabled. Uses system DNS resolver.
Automatic
Default: Chrome automatically chooses when to use Secure DNS.
Secure
Recommended: Always use Secure DNS when possible.
Verification
To verify Secure DNS is working in Chrome:
Check Secure DNS Status
# Open these pages in Chrome to verify configuration:
# Check Secure DNS status:
chrome://net-internals/#dns
# Detailed events and DNS queries:
chrome://net-internals/#events
# Security settings verification:
chrome://settings/security
# Test with DNS leak test:
https://dnsleaktest.com
# Check if Secure DNS is working:
https://www.cloudflare.com/ssl/encrypted-sni/
# Network tab inspection:
# 1. Press F12 → Network tab
# 2. Look for requests to your DoH endpoint
# 3. Filter by "dns-query"
Test DoH Connection
# Open Chrome DevTools Console (F12) and test:
// Check if Secure DNS is enabled
chrome://net-internals/#dns
// Look for "secure_dns_mode" in the output
// Should show "secure" or "automatic"
// Monitor network requests
// Look for requests to: xyz01-srv.unrulycitizen.com
# Alternative testing methods:
// Command line test (if curl available)
curl -H "accept: application/dns-json" \
"https://xyz01-srv.unrulycitizen.com/dns-query?name=unrulycitizen.com&type=A"
// Check browser DNS cache
chrome://net-internals/#dns
Troubleshooting
Secure DNS not working?
- Ensure Chrome version 83 or later
- Check if enterprise policies are overriding settings
- Verify the DoH endpoint URL is correct
- Try disabling VPN or proxy temporarily
- Check for extension conflicts (disable temporarily)
- Clear DNS cache:
chrome://net-internals/#dns→ "Clear host cache"
Common Chrome Issues
- Enterprise policies: May block custom Secure DNS providers
- Extensions: Some security extensions may interfere
- Corporate networks: May block external DoH endpoints
- Certificate issues: Ensure system clock is correct
- DNS blocking: Some networks block port 443 for DoH
- Browser flags: Some flags may conflict with DoH
Enhanced Chrome Security
Recommended Security Settings
Combine Secure DNS with these Chrome security settings for maximum protection:
# Chrome flags for enhanced security (chrome://flags/):
- Enable "Strict origin isolation"
- Enable "Site isolation"
- Enable "Block insecure private network requests"
- Enable "Privacy Sandbox Ads APIs"
- Enable "TLS 1.3 Early Data"
- Enable "Experimental QUIC protocol"
# Additional security settings:
- Enable "Enhanced protection" in Security settings
- Enable "Phishing and malware protection"
- Use "Standard protection" or "Enhanced protection"
- Enable "Warn you if passwords are exposed in a data breach"
- Disable "Allow sites to see if you have payment methods saved"
Need More Help?
Join our community forums for personalized assistance and support
Join Community Forums Back to Knowledge Base