与其旧版本相比，Microsoft Edge Chromium提供了更多个性化选项。然而，这并不意味着浏览器较少关注其安全性和整体隐私。它具有使用户能够将其网络流量及其目的地的内容保密的功能。例如，您可以在 Edge 中设置备用安全 DNS 提供程序(secure DNS provider in Edge)。
微软为Windows 10的默认网络浏览器添加了安全 DNS(Secure DNS)功能。无论(Regardless)您是否使用Edge浏览器工作，您都可能希望在浏览器上启用安全 DNS(Secure DNS)选项。本文介绍了如何在Microsoft Edge中使用(Microsoft Edge)安全 DNS(Secure DNS)功能以及为什么应该这样做。
(Change Secure DNS Provider)在Edge浏览器中更改安全 DNS 提供程序
什么是安全 DNS
安全DNS是一项安全功能，可防止攻击者窃听从您的设备发出的DNS查找请求。它与传统的DNS(DNS)查找请求略有不同。让我们看一下现在DNS的标准场景：
您可能知道，每台设备都需要发送DNS查询请求才能访问 Internet 上的内容。DNS将字母数字URL转换为站点的网络地址。尽管这几十年来一直是常态，但这种方法中的安全层并不是很好。在许多情况下，威胁参与者可以窥探DNS查找请求，从而超出用户隐私。在许多情况下，全球互联网服务提供商(Internet Service Providers)使用的默认DNS服务器以安全性差和速度低于标准而著称。
考虑到这些问题，继续使用您的ISP提供的默认(ISP)DNS服务并不是最好的决定。这就是来自Microsoft的 Secure (Microsoft)DNS的用武之地。
要访问驻留在Internet上的网站，浏览器通常需要查找主机名（例如 example.com）的网络地址（例如 93.184.216.34）。它可以在网站的URL下找到。
安全 DNS通过与(Secure DNS)DNS服务提供商的HTTPS连接使用服务执行此操作。它被称为基于HTTPS(DNS over HTTPS)或DoH的 DNS ，用于查找网络上攻击者的任何修改或窃听。默认情况下，您当前的DNS服务提供商用于避免故障。但是，您可以在Edge(Edge)中设置备用安全DNS提供程序。
为什么安全 DNS 很重要？
Microsoft的Secure DNS功能以简单而有效的方式工作。
大多数ISP(ISPs)和浏览器使用HTTP请求（非安全）来执行DNS查找请求。这意味着拥有正确软件/硬件工具的人可以窥探相同的内容。但是，Microsoft Edge现在可以升级相同的HTTPS通道请求（安全和加密）。Edge使用一种称为DNS-over-HTTPS的技术来实现这一点。
不过，这就是问题所在。并非所有DNS提供商现在都提供对DoH的支持。幸运的是，如果您当前的 DNS 服务不支持Secure DNS ， Edge现在允许您选择第三方DNS服务。例如，免费使用的Cloudflare DNS是(Cloudflare DNS)DNS-over-HTTPS的先驱之一。您可以从默认DNS提供商升级到Cloudflare 。
现在您知道了 Secure DNS的工作原理，让我们看看如何使用它。
设置服务提供商
如果您当前的DNS服务提供商支持Secure DNS，一切都应该没问题。如果没有，Edge会说“您当前的服务提供商可能不提供安全的DNS ” 。
- 如果当前的DNS服务提供商不支持Secure DNS，您可以选择支持的。
- 从两个选项中，选择“选择服务提供商”。
- 您可以输入自定义DNS提供商详细信息或从可用选项中选择一个。
在Edge浏览器中配置安全 DNS ：(Secure DNS)
- 启动 Microsoft Edge
- 前往设置
- 选择隐私、搜索和服务。( Privacy, Search, and Services.)
- 向下滚动到安全(Security)部分。
- 设置(Set)或替代安全DNS提供商
- 关闭设置并退出。
DNS over HTTPS或DoH协议可加密数据并提高网络的整体在线隐私和安全性。
让我们开始吧！
导航(Navigate)到Edge中的浏览器设置(Settings)。
选择隐私、搜索和服务(Privacy, Search, and Services)部分。
切换到右窗格(Right-pane)并向下滚动到安全(Security)部分。
在其下，查找带有以下描述的设置 -使用安全 DNS 指定如何查找网站的网络地址(Use Secure DNS to specify how to look up the network address for websites)。
在这里，您会注意到Edge默认使用当前的服务提供商。但是，如果活动提供商缺乏对安全 DNS(Secure DNS)（域名系统(Domain Name System)）的支持，您也可以启用“选择服务提供商”选项。
当您切换到后一个选项，即选择服务提供商时，(Choose a service provider, ) 您将看到服务提供商列表。选择您要使用的那个。
- 清洁浏览
- 谷歌(Google)
- Cloudflare
- Quad9
完成后，将启用Edge浏览器中的(Edge)安全 DNS(Secure DNS)功能
如果需要，您可以切换到自定义服务提供商。只需将(Simply)DNS服务器地址复制粘贴到空白字段中即可。
您可以选择根据策略理由保留的多个域。(select a number of domains)他们都已由IANA临时委派给(IANA)ICANN进行的IDN 评估(IDN Evaluation)。
您需要了解安全 DNS(Secure DNS)仅在您使用Edge浏览器浏览网站时起作用。如果您使用其他网络浏览器，它可能会使用标准DNS技术。如果您希望在整个系统/网络中获得这种额外的安全性，则必须在Network Preferences中进行设置。问题是您的操作系统可能还不支持安全 DNS(Secure DNS)。
How to change or set up an alternate Secure DNS provider in Edge
In comparison to іts legacy version, Microsoft Edge Chromium offers more personalization options. This, howevеr, does not mean the browser foсusеs less on its safety аnd overall privacy. It has features that enable usеrs to keep the content of their web traffic as well as its destination, рrivatе. For example, you can set an alternate secure DNS provider in Edge.
Microsoft has added a Secure DNS feature to Windows 10’s default web browser. Regardless of whether you use the Edge browser for work, you may want to enable the Secure DNS option on your browser. This article explains how to use the Secure DNS feature in Microsoft Edge and why you should do that.
Change Secure DNS Provider in Edge browser
What is Secure DNS
Secure DNS is a security feature that prevents attackers from eavesdropping into the DNS lookup requests made from your device. It is a little different from the conventional DNS lookup requests. Let’s have a look at the standard scenario of DNS nowadays:
As you might know, every device needs to send a DNS lookup request to access things on the internet. DNS converts the alphanumeric URL to the network address of the site. Although this has been the norm for decades, the security layers in this method aren’t great. There have been many instances where threat actors could snoop into the DNS lookup requests and thereby overrun user-privacy. In many cases, the default DNS servers used by Internet Service Providers worldwide are known for poor security and subpar speed.
Given these many problems, it isn’t the best decision to keep using the default DNS services from your ISP. That is where Secure DNS from Microsoft comes in.
To visit a website residing over the Internet, a browser generally needs to look up the network address (e.g. 93.184.216.34) for the hostname (e.g. example.com). It can be found under the URL of a website.
Secure DNS performs this operation using a service over an HTTPS connection to the DNS service provider. It’s referred to as DNS over HTTPS or DoH and looks up for any modification or eavesdropping by attackers on the network. By default, your current DNS service provider is used to avoid glitches. However, you can set an alternate secure DNS provider in Edge.
Why is Secure DNS is important?
The Secure DNS feature from Microsoft works in a simple yet effective manner.
Most ISPs and browsers use HTTP requests (non-secure) to perform DNS lookup requests. It means people with the right software/hardware tools can snoop into the same. However, Microsoft Edge can now upgrade the same HTTPS channel requests (secure and encrypted). Edge uses a tech called DNS-over-HTTPS to make this possible.
Here’s the catch, though. Not all DNS providers offer support for DoH now. Fortunately, Edge now lets you choose a third-party DNS service if your current one doesn’t support Secure DNS. For instance, Cloudflare DNS, free to use, is one of the pioneers in DNS-over-HTTPS. You can upgrade to Cloudflare from your default DNS provider.
Now that you know how Secure DNS works let’s see how to use the same.
Setting up a service provider
If your current DNS service provider supports Secure DNS, all should be fine. If it doesn’t, Edge will say that ‘your current service provider may not provide secure DNS.
- If the current DNS service provider doesn’t support Secure DNS, you can choose one that does.
- From the two options, pick ‘Choose a service provider.’
- You can either enter the custom DNS provider details or choose one from the available options.
To configure Secure DNS in Edge browser:
- Lauch Microsoft Edge
- Go to Settings
- Choose Privacy, Search, and Services.
- Scroll down to the Security section.
- Set or alternate secure DNS provider
- Close the Settings and Exit.
DNS over HTTPS or DoH protocol encrypts the data and improves overall online privacy and security of the network.
Let’s get started!
Navigate to browser Settings in Edge.
Chose the Privacy, Search, and Services section.
Switch to the Right-pane and scroll down to the Security section.
Under it, look for the setting bearing the following description – Use Secure DNS to specify how to look up the network address for websites.
Here, you will notice that Edge, by default, uses the current service provider. However, you can also enable the ‘choose a service provider’ option if the active provider lacks support for a Secure DNS (Domain Name System).
When you switch to the latter option i.e., Choose a service provider, you will see a list of service providers. Choose the one you wish to use.
- CleanBrowsing
- Google
- Cloudflare
- Quad9
Once done, the Secure DNS feature in Edge browser will be enabled
If required, you can switch to a custom service provider. Simply copy-paste the DNS server address into the empty field.
You can select a number of domains that have been reserved under policy grounds. All of them have been temporarily delegated by IANA for the IDN Evaluation being conducted by ICANN.
You need to understand the Secure DNS works only when you browse websites using the Edge browser. If you use another web browser, it may use the standard DNS technology. If you want this extra security across the system/network, you will have to set it up in the Network Preferences. The problem is that your OS may not support Secure DNS yet.
