O1539871151508, Feb 6, 2019 : Target group is the privacy and security aware usergroup . In modern days a lot of data is leaked via DNS. To counter this various improvements to the DNS standard have been made. I therefore suggest to a) let the user override the Mobile Network DNS Server with their own choice. and b) also to benefit from less manipulation and eavesdropping as well as possible blocking attempts by the network give the user the option to use DoH and DoT Resolvers with a hardfail if the connection doesn't work instead of falling back to insecure mode. There is a basic DoT support for recent Android versions but there is no DoH Support yet. No hardfail option and the DNS Resolver can't be set for Mobile Connections only for specific wifi networks. Using pseudo-VPN apps like the one from Cloudflare breaks existing other VPNS as it is exclusive. OP can do that better.