Join the AMA (Ask Me Anything) with the Firefox leadership team to celebrate Firefox 20th anniversary and discuss Firefox’s future on Mozilla Connect. Mark your calendar on Thursday, November 14, 18:00 - 20:00 UTC!

Avatar for Username

Search Support

Avoid support scams. We will never ask you to call or text a phone number or share personal information. Please report suspicious activity using the “Report Abuse” option.

Learn More

Denc nañu waxtaan wii. Yónneel yeneen laaj soo soxlaa ndimbal.

Is there a global way to turn off dns over https and also make firefox use the system certificate store?

  • 2 tontu
  • 1 am na jafe-jafe bii
  • 11 views
  • i mujjee tontu mooy Mike Kaply

dcrawford1
dcrawford1
more options

Is there a global way to turn off dns over https and also make firefox use the system certificate store?

We have a dns filter that needs to resolve all dns querys and we need a certificate on all systems to allow our Fortigate to do deep packed inspection on all traffic including encrypted.

Is there a global way to turn off dns over https and also make firefox use the system certificate store? We have a dns filter that needs to resolve all dns querys and we need a certificate on all systems to allow our Fortigate to do deep packed inspection on all traffic including encrypted.

All Replies (2)

jscher2000 - Support Volunteer
jscher2000 - Support Volunteer
  • Top 25 Contributor
more options

I can flag your question to move to the "Enterprise" support forum, but in short, I think the answer is "policy":

Mike Kaply
Mike Kaply
  • Moderator
more options

Yes, you can do this with policy.

https://github.com/mozilla/policy-templates/#dnsoverhttps https://github.com/mozilla/policy-templates/#certificates--importenterpriseroots