Adguardhome: Add HTTPS-Only Mode

[hl2guide]

Proposed Solution

Please add an "HTTPS-Only Mode" checkbox to the Settings section.

(Blocks all non-HTTPS requests, unless domain appears in allowlists).

[josephbu]

For the web interface there is the option: Settings -> Encryption Settings -> Redirect to HTTPS automatically

Or are you talking about forcing "Upstream DNS servers" to only use HTTPS except for (insert X) domains?

[ameshkov]

I guess this could be possible to implement using HTTPSSVC DNS records: https://tools.ietf.org/id/draft-nygren-httpbis-httpssvc-00.html#rfc.section.4.2

[hl2guide]

For the web interface there is the option: Settings -> Encryption Settings -> Redirect to HTTPS automatically

Or are you talking about forcing "Upstream DNS servers" to only use HTTPS except for (insert X) domains?

I'll try out: Settings -> Encryption Settings -> Redirect to HTTPS automatically
see if it suits my needs.
[Edit: checked it out and it requires a SSL certificate and mucking around]

In terms of behaviour an example:

• Request is http://www.google.com
• AdGuard redirects to https://www.google.com
• If HTTPS redirect URL does not exist then show "Domain Does Not Support HTTPS" error page

[ameshkov]

If HTTPS redirect URL does not exist then show "Domain Does Not Support HTTPS" error page

That won't be possible to do on the DNS level.

What we probably would be able to do is simply enforcing HTTPS for all domains.

[Macqael]

It's more a job for Adguard Windows/Android/Ios .. no ?

Since they can filter all the traffic