BrowserWorks
[Android] Disabling DoH and ODoH still allows traffic to dooh.waterfox.net
What happened?
Disabling both DNS over HTTPS and Oblivious DoH in Waterfox (Android) has no effect. Even after toggling both off and restarting the app, Waterfox continues to make DNS queries to dooh.waterfox.net.
This causes all DNS traffic to bypass my Pi-hole (v6) setup and defeats local DNS-level filtering.
Steps to reproduce:
- Open Waterfox settings.
- Disable both "DNS over HTTPS" and "Oblivious DoH".
- Restart the browser.
- Monitor DNS traffic using Pi-hole.
- Observe continued requests to
dooh.waterfox.net.
Expected behavior: With both options disabled, Waterfox should use the system DNS resolver only.
Environment:
- Waterfox: 1.0.13 (Build #2025131905)
- OS: Android 15
- Pi-hole: v6
This may be caused by hidden fallback behavior or a bug in the preference handling.
Additional context
Since the hostname includes "dooh", it's unclear whether the traffic is standard DoH or Oblivious DoH. Regardless, with both options disabled, no encrypted DNS queries should occur. This may indicate a UI bug, misconfiguration, or unintended fallback behavior.
Reproducible?
- [x] I have checked that this issue cannot be reproduced on Mozilla Firefox.
Version
1.0.13 (Build #2025131905)
What platform are you seeing the problem on?
Android
Relevant log output
