Comment by pixel_popping

6 days ago

You can actually just move it to a subdomain and wildcard TLS cert as well.

Oh that's clever. Was thinking about putting a slug into the URL as "secret" but subdomain is probably easier to square

  • >but subdomain is probably easier to square

    Why would it be? Is there some client/OS that doesn't support custom paths for DoH?

    • Android private DNS does not support alternate paths, alternative ports or basic http authentication.

    • You can manage subdomain from DNS provider directly which can make it convenient, you can also easily firewall without reverse proxy and you can manipulate it through host files and so-on.