When doing a dns leak test with both DoH (cloudflare) and VPN on, the results are all always from cloudflare with changing the country depending on proton
But in case DoH off and VPN on, resulta shows proton as the isp
So which is more secure? Enabling DoH or not?
Also is there a way to make proton override the DoH dns?
Each Proton VPN server runs a DNS server as well, and our native apps have a default DNS leak protection feature that forces your internet connection to resolve DNS queries via our DNS servers. This means that when you’re connected to Proton VPN, your DNS queries through our encrypted VPN tunnel.
That said, we recommend against using DoH (and the similar DNS over TLS standard) with Proton VPN. When using our apps, all DNS queries are sent through the VPN connection to our servers and are thus securely encrypted without the need for DoH, DoT, or DoQ.
With such a setup, you may experience some unusual errors/slowness or network connection leaks.
To clarify, when using a custom DNS server, it’s very possible that it will override our own DNS servers and will utilize the DNS server that you have specified. When it comes to such a setup, we cannot guarantee that you will not experience leaks, nor that your ISP will not be able to see the DNS requests.
The DNS requests will be sent through the VPN tunnel and use the encryption, but they will be handled by the DNS provider that you’re using, and all privacy/security concerns in such a setup should be addressed by the custom DNS provider, and not Proton VPN, as the DNS requests are not handled by our own internal DNS servers.