DNS Resolver

Oct 8, 2026

​🛡️ Security Fixes
• DNS Fallback Protection: Prevented silent fallbacks to unencrypted plaintext DNS when DoH (DNS over HTTPS) or DoT (DNS over TLS) connections fail.
• Hostname Verification: DoT now strictly verifies the server hostname to mitigate man-in-the-middle (MITM) attacks.
• Widget Action Isolation: Restricted widget actions to prevent unauthorized execution by third-party applications.
​🌐 Local Server & Networking
• Secure Default Binding: Local server mode now binds to 127.0.0.1 by default instead of exposing all interfaces.
• Local Network Sharing: Added a new setting allowing users to safely share DNS services across their local network (LAN).