RainmakerRaw

Thanks for the reasoned and enlightening reply. Have you any better suggestion for a maintained list then? ghacks? Edit: Never mind, I just realised who you are lol. Thanks again...

Thanks again, Thorin. I have my (your) new file in place and everything I need working works (i.e. skipping x-origin-referer so iCloud works). Just one little side question if I...

Again, thank you!

I'm having this type of issue, too. The main Apple logins (eg icloud.com) do indeed work OK once `network.http.referer.spoofSource` is disabled, but I can't log in to Apple Music without...

It seems fixed for me. Here is my Virgin Media ISP line, tested with DoT (using `unbound` v1.16.2 on Fedora 36) as well as DoH in strict mode 3 (Firefox...

Thank you, @ainar-g, for taking the time to reply and for being so helpful. Yes, it was a misunderstanding on my part. The documentation only refers to wildcard certificates. I...

@hexclann You should be fine. I generate certs on multiple instances for `domain.com`, `*.domain.com` and `*.dns.domain.com` without issue (certainly with ZeroSSL and LetsEncrypt). That said, as long as your AGH...

For your own queries do you mean? Surely eSNI is already supported. I get _esni queries answered in my query log all the time, and [Cloudflare confirms](https://www.cloudflare.com/ssl/encrypted-sni/) my connections include...

If you look at the request types, it's processing `HTTPS` queries, not IP records. These will not resolve to an IP for the purposes of connecting to the server in...

Same here (Firefox 82, various Linux distros). I ended up just removing PP for now because so many of the sites I use were impacted.