Why this matters:How to recognise this workaround on your side, and what closes it on your side — without telling you how to do the workaround.
No technical countermeasure exists at this layer. A rule that pretends to close this at the router/endpoint the trick operates on is more dangerous than no rule at all, because it can give the family a false sense of coverage. Apply enforcement at the layer that actually carries the traffic or on the device/account directly.
How common it is: not established as a parental-control circumvention method. RFC 9076 treats public networks as a separate resolver/network context from the home network.
Detection
The child device disappears from the home access point while remaining in active use; home DNS/filter logs contain no corresponding requests.
Fix (technical)
technically not closable by the home router. Use endpoint/account controls for rules intended to follow the device. Home-router filtering remains useful only as a layer for traffic actually using that…
Fix (relational)
Clarify which rules are household-network rules and which are intended to apply everywhere. Rules that silently change their meaning depending on which Wi-Fi is used are difficult for both parent and …
Residual risk
Any unmanaged network remains outside the home router’s control.
Sources
- rfc9076-dns-privacy
Why trust this page?
Belief-disclosure in plain language. Everything the page claims is sourced; instructions are tested against the software version stated above; nothing is bought or affiliate-linked.
- Standing of evidence
- Primary (first-hand or regulatory source)
- Last verified
- 2026-08-17
Sources used on this page, in the order they appear:
- No external sources were cited.