DNS over HTTPS
E746659
DNS over HTTPS is a protocol that sends DNS queries and responses over encrypted HTTPS connections to enhance privacy and security.
Statements (48)
| Predicate | Object |
|---|---|
| instanceOf |
network protocol
ⓘ
privacy-enhancing technology ⓘ |
| abbreviation | DoH NERFINISHED ⓘ |
| canBeImplementedBy |
network resolvers
ⓘ
operating systems ⓘ web browsers ⓘ |
| canUse | JSON format (non-standard) ⓘ |
| comparedWith | traditional DNS over UDP ⓘ |
| definedInStandard | RFC 8484 NERFINISHED ⓘ |
| deployment |
consumer routers (in some models)
ⓘ
enterprise networks ⓘ public recursive resolvers ⓘ |
| doesNotHide |
SNI in TLS 1.2
ⓘ
destination IP addresses ⓘ |
| encapsulates | DNS messages in HTTP ⓘ |
| encryptionProvidedBy | TLS NERFINISHED ⓘ |
| payloadFormat | wire-format DNS messages ⓘ |
| primaryGoal |
enhance DNS privacy
ⓘ
prevent DNS eavesdropping ⓘ prevent DNS manipulation ⓘ |
| privacyProperty |
hides DNS content from ISP resolvers when using third-party DoH
ⓘ
hides DNS content from local network observers ⓘ |
| protectsAgainst |
DNS spoofing on local network
ⓘ
on-path DNS monitoring ⓘ |
| publicationYear | 2018 ⓘ |
| relatedTo |
DNS over TLS
ⓘ
DNSSEC NERFINISHED ⓘ |
| requires | HTTPS URI template ⓘ |
| runsOver |
QUIC
NERFINISHED
ⓘ
TCP NERFINISHED ⓘ TLS NERFINISHED ⓘ |
| standardizedBy |
Internet Engineering Task Force
ⓘ
surface form:
IETF
|
| supportedBy |
Android (system resolver, some versions)
ⓘ
Apple Safari NERFINISHED ⓘ Google Chrome NERFINISHED ⓘ Microsoft Edge NERFINISHED ⓘ Mozilla Firefox NERFINISHED ⓘ Windows 10 NERFINISHED ⓘ Windows 11 NERFINISHED ⓘ various public DNS providers (e.g., Cloudflare, Google Public DNS, Quad9) ⓘ |
| supports |
GET method
ⓘ
POST method ⓘ |
| transports |
DNS queries
ⓘ
DNS responses ⓘ |
| usesPort | 443 ⓘ |
| usesProtocol |
HTTP/2
ⓘ
HTTP/3 NERFINISHED ⓘ HTTPS NERFINISHED ⓘ |
Referenced by (3)
Full triples — surface form annotated when it differs from this entity's canonical label.