Allow upgrade to DoH during automatic mode.

Uses a hardcoded mapping to upgrade insecure DNS and DoT services to
associated DoH services. The mapping is preliminary and will be adjusted
before we run an experiment.

Whether upgrade is attempted is controlled by the new kDnsOverHttpsUpgrade
feature, which is enabled by default on ChromeOS, MacOS, Android, and
Windows. Problematic providers can be excluded from the mapping using the
kDnsOverHttpsUpgradeDisabledProvidersParam feature.

Example usage: --enable-features="DnsOverHttpsUpgrade<DoHTrial" \
--force-fieldtrials="DoHTrial/Group1" --force-fieldtrial-params=\

Bug: 985589
Change-Id: Ife81913bf5b7aade66cace1d3d8ad87d55b11ee5
Commit-Queue: Katharine Daly <>
Reviewed-by: Daniel Cheng <>
Reviewed-by: Eric Orth <>
Cr-Commit-Position: refs/heads/master@{#692989}
17 files changed