Public or foreign Wi-Fi instead of the managed home network
No technical countermeasure exists at this layer. A rule that pretends to close this at the router/endpoint the trick operates on is more dangerous than no rule at all, because it can give the family a false sense of coverage. Apply enforcement at the layer that actually carries the traffic or on the device/account directly.
How common it is: not established as a parental-control circumvention method. RFC 9076 treats public networks as a separate resolver/network context from the home network.
Detection
The child device disappears from the home access point while remaining in active use; home DNS/filter logs contain no corresponding requests.
Fix (technical)
technically not closable by the home router. Use endpoint/account controls for rules intended to follow the device. Home-router filtering remains useful only as a layer for traffic actually using that…
Fix (relational)
Clarify which rules are household-network rules and which are intended to apply everywhere. Rules that silently change their meaning depending on which Wi-Fi is used are difficult for both parent and …
Residual risk
Any unmanaged network remains outside the home router’s control.
Sources
- rfc9076-dns-privacy