Questions tagged [doh]

DNS over HTTPS (DoH) is a protocol for performing remote Domain Name System (DNS) resolution via the HTTPS protocol.

Filter by
Sorted by
Tagged with
0 votes
0 answers
382 views

VPN vs. DoH or both? [duplicate]

I have set my Mac system WiFi DNS to 1.1.1.1. and I believe Safari supports DoH now. Should I use both DoH and a VPN together? Is using both better or does using both decrease security in any way?
GrumbleCat's user avatar
3 votes
1 answer
6k views

Secure DNS (DoH, DoT) differences, performance, comparison

I am reading up on secure DNS (DoH, DoT) and trying to identify its differences. Currently, I am on https://www.cloudflare.com/learning/dns/dns-over-tls/ page. Is there for example some non-...
Vlastimil Burián's user avatar
0 votes
2 answers
2k views

What's the use of encrypted DNS when ISP can see the IP address of the website?

I use an encrypted DNS server that supports DNSSEC and DoH, these features are useful for hiding from the ISP, VPN server provider etc. which website you are trying to look up, but eventually those ...
user avatar
0 votes
1 answer
932 views

What happens if both DoH and DoT are enabled?

If I have DNS over HTTPS and DNS over TLS activated simultaneously (router has DoT activated and smartphone browser has DoH activated, so I see on https://1.1.1.1/help DoH: yes and DoT: yes), which ...
iwab's user avatar
  • 181
1 vote
1 answer
302 views

Why is someone requesting /doh/family-filter and similar paths?

Recently our server logs have been showing lots of requests to urls like the following: https://*.example.com/doh/family-filter and https://*.example.com/doh?dns=DUIBAAABAAAAA... (with our domain ...
djvg's user avatar
  • 473
1 vote
0 answers
289 views

using DoH/DoT with your ISP?

Is there a point to using DoT or DoH while your DNS is your ISP from a security (not privacy) standpoint? Assuming I trust my home network, could there be something along the way between my ISP and me ...
Nullman's user avatar
  • 205
1 vote
2 answers
392 views

Relationship between DoT / DoH and HTTPS

I'm trying to understand the different roles that DoT / DoH and HTTPS are playing when it comes to protecting sensitive data in the internet. I spend the day reading a lot of stuff about DoT, HTTPS, ...
mu88's user avatar
  • 135
1 vote
1 answer
330 views

Privatebin URL/key interception?

I'm trying to figure out if it's possible while listening to the network to read URLs from the traffic. Since privatebin uses the encryption key in the URL, what process could be in use to prevent ...
Ozwel's user avatar
  • 173
1 vote
2 answers
2k views

What does using a VPN offers over HTTPS + DoH in terms of protection?

What are the security risks that someone using HTTPS (everywhere) + DoH is vulnerable to, comparing to someone using a "trusted" VPN?
Luis Vasconcellos's user avatar
0 votes
0 answers
20 views

DNS over HTTPS (DoH) [duplicate]

DNS over HTTPS aims to increase user privacy and security by preventing eavesdropping and manipulation of DNS data using the HTTPS protocol to encrypt the data between the client and the DoH based DNS ...
user215422's user avatar
8 votes
1 answer
9k views

What does using Cloudflares WARP app offer that HTTPS (websites) alongside DNS over HTTPS / TLS doesn't?

Intoduction to Cloudflare WARP I’ve been looking at Cloudflares WARP app for mobile. It claims to be a VPN but without some of the IP hiding anonymity features normal VPNS have: “Under the covers, ...
SneakyShrike's user avatar
26 votes
5 answers
12k views

Why is DNS-over-HTTPS such a big security nightmare compared to DNS-over-TLS?

I've heard the argument against DNS-over-HTTPS that it is supposed to be a security nightmare for network defenders because it enables encrypted DNS over port 443, compared to DNS-over-TLS which goes ...
hilltothesouth's user avatar
1 vote
1 answer
250 views

How do DoT and DoH facilitate fingerprinting by resolver operators?

https://dnscrypt.info/faq/ states for both DNS over HTTPS and DNS over TLS that it Provides more information than regular DNS to resolver operators in order to fingerprint clients How so?
lucidbrot's user avatar
  • 135
1 vote
1 answer
2k views

Can I intercept DNS-over-HTTPS (DoH) or -TLS (DoT) in my home network?

Right now I am redirecting all local network DNS traffic to my Pi-hole install, since some device do or may in the future use hardcoded DNS servers to bypass filtering. Since DNS-over-HTTPS and DNS-...
FarO's user avatar
  • 323
3 votes
1 answer
662 views

What does DNS-over-HTTPS actually do?

I don't mean a technical breakdown of how the technology works but what does it do for me, the end user. For instance, does it prevent my ISP or network admin from seeing/logging the sites I connect ...
Frank's user avatar
  • 41
4 votes
3 answers
2k views

Why are DNS requests visible with DNS over HTTPS enabled?

So, Firefox 73 rolled out today and with it comes a new DNS option called NextDNS. I thought of giving it a shot and clicked "Enable DNS over HTTPS" and selected NextDNS. Now, my understanding of ...
7_R3X's user avatar
  • 646