Questions tagged [doh]
DNS over HTTPS (DoH) is a protocol for performing remote Domain Name System (DNS) resolution via the HTTPS protocol.
18 questions
2 votes
2 answers
163 views
How safe is it to open a recusive DoH resolver to the internet?
I understand that open UDP DNS resolvers can be used to amplify DOS. Are there any pit falls such as this I need to be aware of before opening my resolver?
- 21
0 votes
1 answer
141 views
Can Google SafeSearch be enforced on a network where a user uses DoH?
As you may know, Google SafeSearch can be, and often is enforced by network admins on their networks. And according to this Google article, this is how it works: Set the DNS entry for www.google.com (...
- 4,815
0 votes
0 answers
624 views
VPN vs. DoH or both? [duplicate]
I have set my Mac system WiFi DNS to 1.1.1.1. and I believe Safari supports DoH now. Should I use both DoH and a VPN together? Is using both better or does using both decrease security in any way?
5 votes
1 answer
13k views
Secure DNS (DoH, DoT) differences, performance, comparison
I am reading up on secure DNS (DoH, DoT) and trying to identify its differences. Currently, I am on https://www.cloudflare.com/learning/dns/dns-over-tls/ page. Is there for example some non-negligible ...
- 1,747
1 vote
2 answers
5k views
What's the use of encrypted DNS when ISP can see the IP address of the website?
I use an encrypted DNS server that supports DNSSEC and DoH, these features are useful for hiding from the ISP, VPN server provider etc. which website you are trying to look up, but eventually those ...
user279925
0 votes
1 answer
2k views
What happens if both DoH and DoT are enabled?
If I have DNS over HTTPS and DNS over TLS activated simultaneously (router has DoT activated and smartphone browser has DoH activated, so I see on https://1.1.1.1/help DoH: yes and DoT: yes), which ...
- 191
1 vote
1 answer
340 views
Why is someone requesting /doh/family-filter and similar paths?
Recently our server logs have been showing lots of requests to urls like the following: https://*.example.com/doh/family-filter and https://*.example.com/doh?dns=DUIBAAABAAAAA... (with our domain ...
- 487
1 vote
0 answers
343 views
using DoH/DoT with your ISP?
Is there a point to using DoT or DoH while your DNS is your ISP from a security (not privacy) standpoint? Assuming I trust my home network, could there be something along the way between my ISP and me ...
- 215
1 vote
2 answers
508 views
Relationship between DoT / DoH and HTTPS
I'm trying to understand the different roles that DoT / DoH and HTTPS are playing when it comes to protecting sensitive data in the internet. I spend the day reading a lot of stuff about DoT, HTTPS, ...
- 135
2 votes
1 answer
451 views
Privatebin URL/key interception?
I'm trying to figure out if it's possible while listening to the network to read URLs from the traffic. Since privatebin uses the encryption key in the URL, what process could be in use to prevent ...
- 183
2 votes
2 answers
2k views
What does using a VPN offers over HTTPS + DoH in terms of protection?
What are the security risks that someone using HTTPS (everywhere) + DoH is vulnerable to, comparing to someone using a "trusted" VPN?
0 votes
0 answers
26 views
DNS over HTTPS (DoH) [duplicate]
DNS over HTTPS aims to increase user privacy and security by preventing eavesdropping and manipulation of DNS data using the HTTPS protocol to encrypt the data between the client and the DoH based DNS ...
- 85
8 votes
1 answer
11k views
What does using Cloudflares WARP app offer that HTTPS (websites) alongside DNS over HTTPS / TLS doesn't?
Intoduction to Cloudflare WARP I’ve been looking at Cloudflares WARP app for mobile. It claims to be a VPN but without some of the IP hiding anonymity features normal VPNS have: “Under the covers, ...
- 193
27 votes
5 answers
17k views
Why is DNS-over-HTTPS such a big security nightmare compared to DNS-over-TLS?
I've heard the argument against DNS-over-HTTPS that it is supposed to be a security nightmare for network defenders because it enables encrypted DNS over port 443, compared to DNS-over-TLS which goes ...
- 489
1 vote
1 answer
312 views
How do DoT and DoH facilitate fingerprinting by resolver operators?
https://dnscrypt.info/faq/ states for both DNS over HTTPS and DNS over TLS that it Provides more information than regular DNS to resolver operators in order to fingerprint clients How so?
- 135