- Install something to block trackers like uBlock Origin if you don't have it already. Surprisingly this is a requirement in many cases.
- Open Settings, search for a setting called "DNS over HTTPS", enable it, and select Cloudflare.
(If on Librewolf, select "Custom" and paste this address:
Other alternative DNS providers will work too.
- Open the
about:configin the address bar)
Set the following parameters to "true" (to find them, paste their names in the search bar inside this menu)
- Restart Firefox (necessary sometimes)
- Finally, test the connection privacy with this Tool. Click on Check my browser. The 4 results should be green for this to work.
You can check if a site is using Cloudflare with www.urlvoid.com, looking at the ASN row in the results.
It doesn't work for these (they don't use Cloudflare): Amazon (including AWS, Twitch…), Microsoft (including Azure, OneDrive, Outlook, Office 365…), Google (including Gmail, Google Cloud…), Apple (including iCloud, iMessage…), Reddit, YouTube, Facebook, Instagram, Twitter, GitHub
It doesn't work in China according to this
the TLS protocol used in most HTTPS connections in most Browsers (Chrome/Brave among them) will leak the Domain Name again through SNI handshakes (this can be checked here at Cloudflare). As of the writing of this guide, only Firefox-based browsers supports ECH (Encrypted Client Hello previously known as eSNI) on some websites which will encrypt everything end to end (in addition to using a secure private DNS over TLS/HTTPS) and will allow you to hide your DNS requests from a third party. And this option is not enabled by default either so you will have to enable it yourself.
In addition to limited browser support, only web Services and CDNs behind Cloudflare CDN support ECH/eSNI at this stage.
we recommend that users wait for ECH to be enabled by default, some may want to enable this functionality earlier. This can be done in about:config by setting network.dns.echconfig.enabled and network.dns.use_https_rr_as_altsvc to true, which will allow Firefox to use ECH with servers that support it.