Privacy warning

[Alwyn]

I have a message saying “This network is blocking encrypted DNS traffic.
The names of websites and other servers your device accesses on this network may be monitored and recorded by other devices on this network.”

My wifi had gone down this morning so I rebooted it and this is what I got.

My emails aren’t being picked up.

Do I contact my network provider or do I have to reset as recommended by Apple? The latter looks complicated.

 

[Rod]

Here is what I found. I was about to say why not use a VPN but this explains everything in much more detail;

Network Blocks Encrypted DNS​

When your device displays the message “This network is blocking encrypted DNS traffic. The names of websites and other servers your device accesses on this network may be monitored and recorded by other devices on this network,” it indicates that your network is not supporting or allowing encrypted DNS (Domain Name System) queries. This means that your device’s DNS requests are being sent in plain text, making them visible to other devices on the same network.

Consequences​

Without encrypted DNS, your network activity may be vulnerable to eavesdropping and monitoring. This includes:

1. Website names: The names of websites you visit may be visible to other devices on the network.
2. Server names: The names of servers you interact with (e.g., login servers, APIs) may also be visible.
3. Potential security risks: Malicious actors on the same network may exploit this lack of encryption to intercept and manipulate your DNS traffic, potentially compromising your online security.

Possible Causes​

The warning may occur due to:

1. Outdated router firmware: Your router’s firmware may not support encrypted DNS protocols (DNS over HTTPS/DoH or DNS over TLS/DoT).
2. Network configuration: Your network administrator or ISP may have configured the network to block or not support encrypted DNS.
3. VPN or DNS client issues: Problems with your VPN or DNS client software may cause the warning to appear.

Potential Solutions​

To resolve the issue:

1. Restart your device and router: Sometimes, a simple restart can resolve the problem.
2. Check your router’s firmware: Ensure your router’s firmware is up-to-date and supports encrypted DNS protocols.
3. Contact your network administrator or ISP: If you’re on a corporate or public network, reach out to your administrator or ISP to inquire about their DNS configuration and potential solutions.
4. Use a VPN: Consider using a reputable VPN service to encrypt your internet traffic, including DNS queries.
5. Change your DNS settings: If possible, configure your device to use a public DNS service that supports encryption, such as Google Public DNS or Cloudflare DNS.

So, really this is just a notification FYI. It's nothing unusual, lots of people would be in this situation but today providers and devices seem obliged to inform us about it which is a good thing.

 

[IWT]

First class advice and explanation by Rod.

From all the advice he gave, the easiest first step is, as he said, to change your DNS settings. This is easy enough to do (usually). I've not tried Google Public DNS myself; but I do use Cloudflare DNS which I think is excellent.

This Apple Link explains how to do it:

Change DNS settings on Mac

On your Mac, use DNS network settings to enter DNS servers and search domains.

support.apple.com

I think Alwyn has Ventura as the OS. When you open the Link above, it may default to Sequoia, but you can easily change this by clicking on the options to get to your own OS.

Ian

 

[Rod]

All that advice was courtesy of Brave browser's AI Leo. As a result of searching the notification verbatim. They do have their uses these AI's.

 

[IWT]

And no bad language or insults - as in another ongoing Thread.

Ian

 

[Rod]

Not sure how to do it in Sequoia, haven't needed to but in Ventura it was easy. Open DNS is a good one which I used to use Cloud Flare is also very good now; Primary and secondary DNS servers: 1.1.1.1 and 1.0.0.1
Just substitute the primary for whatever your ISP gave you and add the secondary below that.
NOTE: Adding a new DNS will erase the ISP provided DNS number in settings so take note of it first, in case you want to go back to it.