!! iOS 14 PRIVACY WARNING !! Encrypted DNS not supported by Deco
!! iOS 14 PRIVACY WARNING !! Encrypted DNS not supported by Deco
To all Deco Owners,
please note TPLINK doesn't support DOT(DNS over TLS) or DOH(DNS over HTTPS) on any of their Deco devices and has so far refused to provide an explanation.
Without encrypted DNS, ISP and local network devices can read which websites you visit (not necessarily what u do on those websites).
@Kevin: do kindly let us know when this feature will be included with the beta firmware currently released.
- Copy Link
- Subscribe
- Bookmark
- Report Inappropriate Content
HI, All
Please refer to this link for more suggestions:
[Solution] Privacy warning-this network is blocking encrypted DNS
- Copy Link
- Report Inappropriate Content
Hello, thanks for your kind reminding.
Can you please update your Deco M5 to the latest firmware version first, then reconnect to the Wi-Fi again to see if this warning disappears?
BTW, where did you get this Privacy warning on your iOS14? We tested with an iOS 14.0.1 and we cannot find this warning. Can I have the model of your iPhone and its version?
- Copy Link
- Report Inappropriate Content
I have updated to the latest version for my Deco M5 model EU V1 : 1.4.7
Secondly, the screenshot was taken on an iPhone 6S running iOS 14.0.1. Here is a below diagnostic message from cloudflare DNS:
With my ipv4 & ipv6 resolvers set to Cloudflare, both DoH & DoT are not available on any devices on my Deco network.
- Copy Link
- Report Inappropriate Content
Hi, thanks for the update.
While 1.4.7 is not the latest firmware version for the Deco M5, you need to update to the newer 1.4.9 version, please check and confirm.
BTW, can you please confirm again where is the below screenshot from? Is it taken on your iOS 14.0.1 or somewhere else? Thanks.
- Copy Link
- Report Inappropriate Content
hi,
1) when I click update in the deco app, it says I am updated to the latest version. Attaching firmware screenshot. Do let me know if I have to download a new update from another source?
2) I am confirming that in iOS 14.0.1 on an iPhone 6S, I am seeing that new privacy error.
could you kindly confirm if the Deco will have support for DoH & DoT encrypted DNS?
- Copy Link
- Report Inappropriate Content
Hi, thanks again for your reply. Generally, whether it supports the DoH & DoT encrypted DNS may depend on the client device but not decided by the Deco network.
When you try to access the https://1.1.1.1/help, are both the IPv6 and IPv4 connection good?
What if you connect your PC to your front-end modem directly, will both the DoH and DoT encrypted DNS show Yes? Or you may test with another router if possible.
Thanks~
- Copy Link
- Report Inappropriate Content
hi,
when trying to access 1.1.1.1/help - yes both ipv4 and ipv6 are configured and working.
none of the clients were able to use DoH or DoT by default on the Deco network - I had to install profiles on the iOS devices and force Chrome flags on my desktop to turn on DoH protocol. This still leaves room for monitoring on other client devices.
Cloudflare has highlighted in their support document that a portforward of the users DNS resolvers (in this case 1.1.1.1 & 1.0.0.1) to port 853, would be able to cover all devices on the network with DoT protocol as seen below:
forward-zone:
name: "."
forward-addr: 1.1.1.1@853
forward-addr: 1.0.0.1@853
forward-addr: 2606:4700:4700::1111@853
forward-addr: 2606:4700:4700::1001@853
forward-ssl-upstream: yes
Could we hope for a feature like this in an upcoming update?
- Copy Link
- Report Inappropriate Content
Hey! DoH is becoming a standard. No support yet?
- Copy Link
- Report Inappropriate Content
Agreed! When will this be implemented? DoH is a critical feature that's available on most of your competitors' latest devices.
- Copy Link
- Report Inappropriate Content
Any update on this please? I have the X60 and have the same issue.
- Copy Link
- Report Inappropriate Content
The same with Archer AX50 v1.0, firmware 1.0.11 Build 20210730 rel.54485(4555)
- Copy Link
- Report Inappropriate Content
Information
Helpful: 1
Views: 13049
Replies: 11