Skip to main content

Questions tagged [dot]

DNS over TLS (DoT) is a protocol for performing remote Domain Name System (DNS) resolution over the TLS protocol.

Filter by
Sorted by
Tagged with
5 votes
1 answer
10k views

Secure DNS (DoH, DoT) differences, performance, comparison

I am reading up on secure DNS (DoH, DoT) and trying to identify its differences. Currently, I am on https://www.cloudflare.com/learning/dns/dns-over-tls/ page. Is there for example some non-...
Vlastimil Burián's user avatar
1 vote
2 answers
4k views

What's the use of encrypted DNS when ISP can see the IP address of the website?

I use an encrypted DNS server that supports DNSSEC and DoH, these features are useful for hiding from the ISP, VPN server provider etc. which website you are trying to look up, but eventually those ...
user avatar
2 votes
1 answer
2k views

How to check to see whether DNS over TLS is blocked in my network by ISP?

I'm looking for a method to check whether DNS over TLS is blocked in my network by my ISP or not. A method that isn't just trial and error of a bunch of popular DoT providers to see which one connects ...
user avatar
-1 votes
1 answer
162 views

What exactly is the sense of DoT with respect to privacy, given that my provider can log my destination IP addresses?

I guess I have understood the basic concepts of DoT and DoH and how they prevent providers (ISPs) from analyzing my DNS queries and creating profiles. However, I have got a question which is so basic ...
Binarus's user avatar
  • 599
0 votes
1 answer
1k views

What happens if both DoH and DoT are enabled?

If I have DNS over HTTPS and DNS over TLS activated simultaneously (router has DoT activated and smartphone browser has DoH activated, so I see on https://1.1.1.1/help DoH: yes and DoT: yes), which ...
iwab's user avatar
  • 181
1 vote
1 answer
11k views

Any Cloudflare's DNS over TLS (DoT) check + DNSSEC test?

In my original question from 2020, I was unsuccessful in my effort to setup Cloudflare's (link to docs) DNS over TLS (DoT) (link to wiki) in my old, and now decomissioned, router: Does Cloudflare'...
Vlastimil Burián's user avatar
1 vote
0 answers
318 views

using DoH/DoT with your ISP?

Is there a point to using DoT or DoH while your DNS is your ISP from a security (not privacy) standpoint? Assuming I trust my home network, could there be something along the way between my ISP and me ...
Nullman's user avatar
  • 215
1 vote
2 answers
451 views

Relationship between DoT / DoH and HTTPS

I'm trying to understand the different roles that DoT / DoH and HTTPS are playing when it comes to protecting sensitive data in the internet. I spend the day reading a lot of stuff about DoT, HTTPS, ...
mu88's user avatar
  • 135
2 votes
2 answers
2k views

Does Cloudflare's DNS over TLS (DoT) implement DNSSEC too?

I am confused about if I decided to implement DNS over TLS (DoT), would I lose DNSSEC? Details: I am connected with IPv4 + IPv6 Cloudflare DNS directly in my home OpenWrt router. I love the idea of ...
Vlastimil Burián's user avatar
8 votes
1 answer
10k views

What does using Cloudflares WARP app offer that HTTPS (websites) alongside DNS over HTTPS / TLS doesn't?

Intoduction to Cloudflare WARP I’ve been looking at Cloudflares WARP app for mobile. It claims to be a VPN but without some of the IP hiding anonymity features normal VPNS have: “Under the covers, ...
SneakyShrike's user avatar
1 vote
1 answer
274 views

How do DoT and DoH facilitate fingerprinting by resolver operators?

https://dnscrypt.info/faq/ states for both DNS over HTTPS and DNS over TLS that it Provides more information than regular DNS to resolver operators in order to fingerprint clients How so?
lucidbrot's user avatar
  • 135
3 votes
1 answer
1k views

Does Unbound re-use TLS connections for DoT forwarding?

Unbound has the option to use DNS over TLS as an upstream (through the forward-tls-upstream setting). CludFlare's 1.1.1.1 service offers this; also through TOR. My question is whether Unbound will ...
vbence's user avatar
  • 131