AdGuard v7.17 for Windows: on-the-fly DoH connection filtering

We just rolled out a major release with two important additions, thanks to updated CoreLibs. First up, we enhanced the Encrypted ClientHello feature, which amps up your privacy protection. Plus, we’ve introduced on-the-fly DoH connection filtering for even more security. Let’s dive in and explore.

Enhanced Encrypted ClientHello

AdGuard for Windows supports ECH as an experimental feature. It helps us to encrypt the very last unencrypted bit of information, thus improving your privacy level. We are working hard to resolve some technical issues so that it can become one of the default options for users. The updated CoreLibs is another step towards that goal.

On-the-fly DoH connection filtering

CoreLibs v1.14 also allows us to implement on-the-fly DoH connection filtering. Why is it so important? Previously, if you set up DoH in a browser but not in AdGuard, we had to filter requests directly in the browser and send them to the system DNS (unencrypted). This process lowered the level of security for such users. Now the situation is completely different. With on-the-fly DoH connection filtering, we can filter DNS requests in the browser without sending them to an unencrypted server.

We also made some minor fixes here and there, updated WFP and TDI drivers, as well as DnsLibs.

Want to know more? Check out the full changelog on GitHub. We always appreciate feedback: feel free to leave a comment below or hit us up on social media.