From 77b304c92e991d45bf7a533a9afa83f457378fc1 Mon Sep 17 00:00:00 2001
From: Daniel Micay <danielmicay@gmail.com>
Date: Mon, 2 Mar 2020 05:09:22 -0500
Subject: [PATCH] add section on default DNS servers

---
 static/faq.html | 11 +++++++++++
 1 file changed, 11 insertions(+)

diff --git a/static/faq.html b/static/faq.html
index c291bb10..4933c154 100644
--- a/static/faq.html
+++ b/static/faq.html
@@ -66,6 +66,7 @@
                         bundled apps make by default?</a></li>
                         <li><a href="#cellular-tracking">What does GrapheneOS do about cellular
                         tracking and silent SMS?</a></li>
+                        <li><a href="#default-dns">Which DNS servers are used by default?</a></li>
                         <li><a href="#custom-dns">How do I use a custom DNS server?</a></li>
                         <li><a href="#private-dns-ip">Why does Private DNS not accept IP
                         addresses?</a></li>
@@ -375,6 +376,16 @@
             sending texts or other data is not required or particularly useful to track devices
             connected to a network for an adversary with the appropriate access.</p>
 
+            <h3 id="default-dns">
+                <a href="#default-dns">Which DNS servers are used by default?</a>
+            </h3>
+
+            <p>By default, the OS uses the network-provided DNS servers, whether those come from
+            DHCP or static network configuration. If no DNS servers are provided, GrapheneOS uses
+            <a href="https://developers.cloudflare.com/1.1.1.1/what-is-1.1.1.1/">Cloudflare DNS</a>
+            as the fallback rather than Google Public DNS. In practice, the fallback is rarely
+            used and has little real world impact.</p>
+
             <h3 id="custom-dns">
                 <a href="#custom-dns">How do I use a custom DNS server?</a>
             </h3>