GrapheneOS

@lka1988 @pineapplelover

Why do you want to have a slow, legacy and hard to debug implementation of domain-based filtering instead of managing it with an app?

Domain-based filtering is also very limited in what it can since it’s trivially bypassed by apps or web sites using IPs or doing their own DNS resolution, which is fairly widely adopted. For example, WhatsApp will still work with the domains blocked. In practice, you’ll also only be filtering domains not used for useful functionality.

@lka1988 @pineapplelover

> System-wide hosts-based adblocking

That’s not a good way to do it.

> DNS/always-on VPN is not a reasonable solution

You don’t need to use a DNS service or VPN service to filter remotely. You can filter locally via the VPN service feature, including while using a VPN if you want.

You should follow our advice and do it with an app like RethinkDNS providing support for both local filtering and optionally using WireGuard VPNs at the same time including chained VPNs.