Avatar for Username

Search Support

Avoid support scams. We will never ask you to call or text a phone number or share personal information. Please report suspicious activity using the “Report Abuse” option.

Learn More

Wo archive tread sia. Meɖekuku bia biabia yeye ne ehia kpeɖeŋu.

Is there a global way to turn off dns over https and also make firefox use the system certificate store?

  • 2 ŋuɖoɖowo
  • 1 masɔmasɔ sia le esi
  • 11 views
  • Nuɖoɖo mlɔetɔ Mike Kaply

dcrawford1
dcrawford1
more options

Is there a global way to turn off dns over https and also make firefox use the system certificate store?

We have a dns filter that needs to resolve all dns querys and we need a certificate on all systems to allow our Fortigate to do deep packed inspection on all traffic including encrypted.

Is there a global way to turn off dns over https and also make firefox use the system certificate store? We have a dns filter that needs to resolve all dns querys and we need a certificate on all systems to allow our Fortigate to do deep packed inspection on all traffic including encrypted.

All Replies (2)

jscher2000 - Support Volunteer
jscher2000 - Support Volunteer
  • Top 25 Contributor
more options

I can flag your question to move to the "Enterprise" support forum, but in short, I think the answer is "policy":

Mike Kaply
Mike Kaply
  • Moderator
more options

Yes, you can do this with policy.

https://github.com/mozilla/policy-templates/#dnsoverhttps https://github.com/mozilla/policy-templates/#certificates--importenterpriseroots