Comment by ogig

>Advertising companies are pushing DoH to remove control from you and give them the control, so be aware of that

True. My first naive attempt at content filtering for my kids was to use a family friendly DNS for the whole network. That's when I learned about chrome's secure DNS option, witch effectively bypasses my intended settings. I guess endpoint control is the only effective option. A mandatory http proxy could be used to filter by hostname too. None of them easy, and I'm supposed to be an expert. Normal people has little chance of implementing technical parental controls.