0

Feature Request: Full URL Logging for Parental Monitoring

Hello NextDNS Team,

I would like to request a feature that allows users to view the full URLs visited on monitored devices, including pages accessed through Incognito mode.

Currently, NextDNS logs domain names, but not the complete page URLs or paths. Please consider adding an optional parental monitoring feature that records full URLs, with appropriate privacy controls and consent.

This would make NextDNS much more useful for parents who want to monitor their children's internet activity.

Thank you for considering this feature request.

1 reply

null
    • TechStud
    • 6 hrs ago
    • Reported - view

    tl;dr -- A DNS provider, like NextDNS and others, resolve domain names (example.com / www.example.com), they don't see the full URL, including the page path or query parameters. This means DNS and DNS-based filtering operates at the domain level only. An EDR service provider is likely what you want/need.

     

    What you're asking for falls outside of what DNS Service providers like NextDNS offer and more in-line with an EDR (Endpoint Detection and Response) service provider, like Crowdstrike and others, who can provide endpoint sensors and other integrations to collect device telemetry, detect threats, and investigate activity (more in-line of what you're asking for). 

     

    What NextDNS can and cannot see

    Consider someone visiting this URL:

    https://www.example.com/parental-controls/article?id=123

    What DNS can see

    www.example.com

    The hostname that needs to be resolved to an IP address. DNS logging can associate a device or client with this query when the provider has sufficient identifying information.

     

    What DNS does not see

    /parental-controls/article?id=123

    The path, query parameters, page content, and other details of the HTTPS request are not part of the DNS query.

     

    If you're asking NextDNS to become a browser-monitoring or endpoint-monitoring solution in addition to being a DNS filtering service, that would require a significantly different data-collection mechanism, additional client-side software / integrations, and a different set of security and privacy considerations. This would quickly turn into a slippery-slope into preventative measures which would then require further technical and security and privacy measures... basically a completely different service than what they offer today! Possible? Sure, if they're looking to expand. Realistic? I don't think so, but that is just me. 

Login to reply

Content aside

  • 4 hrs agoLast active
  • 1Replies
  • 17Views
  • 2 Following