#1

I use the Deco app to set up parental controls. If I block a domain like example-dot-com, will it block all sub-domains such as node1.example-dot-com and node2.example-dot-com? (I took out the dot because it wouldn't let me post this.)

#2

Does Deco block the DNS request, the IP address, or by inspecting HTTP headers?

#3

If IP, how does it work with multiple IPs per hostname?

#4

If it blocks at DNS level, how does it work with DoH (DNS over HTTP)?

#5

Can the parental control be thwarted by modern encryption of the HTTPS. I'm not an expert, but it looks like Encrypted Client Hello (ECH) encrypts the hostname in the HTTP request.