“This network is blocking encrypted DNS traffic.”

[#1]

The above privacy warning has just appeared on my iPhone WiFi settings in reference to my Plusnet WiFi connection. It goes on to say that other devices can monitor and record websites and servers accessed by my device. Can anyone help? Thank you

[#2]

Never seen that on either my iPhone or iPad. Can you possibly post a screenshot of the message?

[#3]

It sounds like a scammy ad, I too have never seen that and Private Relay would give a different error (and you'd have had to switch that on purposefully).

As @jab1 says a screenshot would be helpful.

[#4]

I have just started having the same message. I attach a screen shot.

[#5]

I think I had that when I first upgraded to iOS 15 - re-reading it, it is nothing to worry about, as only other devices connected to YOUR network can monitor or record anything, and the chances of a rogue connecting to your network are remote.

[#6]

Hi, My son had this a few days back on his iphone. Checked and possibly we reconnected to wifi and all is working. I don't think it's anything serious. If all is working don't worry.

[#7]

@elvenheart See my post above. It is absolutely nothing to worry about - just Apple covering themselves (probably for the litigious US market).

[#8]

---

@jab1 wrote:

I think I had that when I first upgraded to iOS 15 - re-reading it, it is nothing to worry about, as only other devices connected to YOUR network can monitor or record anything, and the chances of a rogue connecting to your network are remote.

---

No, it's more than that - it means that DNS queries are visible between the device and the recursive resolver, which would be Plusnet's DNS server by default. If you have an alternative resolver configured - such as Google, Cloudflare etc - then any blocking of encrypted DNS (whether that be by the router, the ISP etc) means that exposure window is increased. The potential for exposure is not limited to the local network, although I can see why you might think that given Apple's ambiguous wording. 

@jab1 wrote:

@elvenheart See my post above. It is absolutely nothing to worry about - just Apple covering themselves (probably for the litigious US market).

The warning isn't for Apple's benefit, it is for users who might be concerned about DNS queries being sent for resolution unencrypted.

[#9]

@MJN Thanks for the explanation, I admit to not being an expert in these matters, but for the vast majority of users, I think it is an overblown reaction. Feel free to correct me.😁

[#10]

I’m on iOS 14.7 and also get this message. I’m a new user to Plusnet. My broadband was only just activated yesterday (15/12) and this is the first time I’ve seen the privacy warning. It is somewhat worrying.

[#11]

Hey @Chokelever, 

Apologies for any concern this may have caused. This isn't anything to worry about and can be safely ignored

[#12]

---

@MJN wrote:

---

@jab1 wrote:

I think I had that when I first upgraded to iOS 15 - re-reading it, it is nothing to worry about, as only other devices connected to YOUR network can monitor or record anything, and the chances of a rogue connecting to your network are remote.

---

No, it's more than that - it means that DNS queries are visible between the device and the recursive resolver, which would be Plusnet's DNS server by default. If you have an alternative resolver configured - such as Google, Cloudflare etc - then any blocking of encrypted DNS (whether that be by the router, the ISP etc) means that exposure window is increased. The potential for exposure is not limited to the local network, although I can see why you might think that given Apple's ambiguous wording. 

---

Assuming this to be the case, the wording isn't ambiguous, it's outright misleading. I know of no reason why a device cannot be configured to use DoT or DoH whilst connected to a Plusnet router/the Plusnet network

[#13]

---

@bobpullen wrote:

---

---

Assuming this to be the case, the wording isn't ambiguous, it's outright misleading. I know of no reason why a device cannot be configured to use DoT or DoH whilst connected to a Plusnet router/the Plusnet network

---

The issue is that the client's configured recursive resolver target needs to support DoT/DoH (ideally every hop in the chain does but the client can only observe the behaviour of the first hop) and, by default, this will be the router or Plusnet's DNS server hence the warning if they don't support it. The warning is only saying how things are, not how they could be if reconfigured.

[#14]

In which case it should say something akin to 'not currently configured to use...' or 'Your DNS traffic is currently unencrypted'.

'Blocking' implies exactly that. That we/the ISP are intentionally preventing the use of something, which is evidently not the case here.

The cynic in me does wonder whether or not the terminology is so aggressive as to push customers towards paid iCloud subscriptions/Private Relay

[#15]

You could be on to something there with your 'cynic' assumption, @bobpullen , and unfortunately there could be many who might fall for it - most users wouldn't spot the obvious.