Which conditions trigger Firefox to fall back to system DNS after a DoH certificate error?
Goal Determine the exact circumstances under which Firefox, with DNS over HTTPS (DoH) enabled, silently reverts to the system resolver when encountering a certificate validation error during a DoH request. Current Ambiguities Firefox defaults to the system DNS but may override this when DoH is active. A failed TLS handshake on a DoH query can be interpreted