I appreciate your question and your goal! The answer is (as you probably suspected), it depends. You'll notice the nuance in these details.
- On Mac, when Covenant Eyes® chooses to not block a domain, the Mac client respects the device’s DNS settings, whatever they are set to.
- Windows uses CleanBrowsing to resolve the DNS request. If CleanBrowsing fails to resolve it, then the client falls back to the system defined DNS server.
- When using WiFi, our mobile apps should fallback to the DHCP-assigned DNS.
And, as you'd expect, all of those details are subject to change. Let me know if you have any other questions! Thanks again for reaching out!