When you visit a site, your Mac first looks up its address using DNS. Normally those lookups are not encrypted, so others on the network can see which sites you ask for.
When Kraken is on, Krodium sends these lookups using DNS over HTTPS, encrypted, through Quad9. If Quad9 cannot be reached, Krodium falls back to your normal DNS so you can still browse.
If you cannot reach a site
Some networks, such as workplaces and schools, block encrypted DNS or rely on their own. If a site will not load with Kraken on, turn Kraken off and try again. If it then loads, the cause is DNS.
DNS over HTTPS can also be switched on or off by itself in Settings, under Privacy and Security.
Still stuck? Write to [email protected].