DNS Encryption Explained
Oct 29, 2019Peter Wu
Summary
This post explains the mechanisms of DNS over TLS (DoT) and DNS over HTTPS (DoH) for encrypting DNS queries and responses. It details the underlying TLS handshake for DoT and the reuse of HTTPS for DoH, highlighting the advantages of DoH in using port 443 to avoid firewall blocking and potential fallback attacks. It also touches upon the potential performance benefits of HTTP/3 and DNS over QUIC.
More from the DNS Infrastructure & Naming Conventions trail
- The keys to the Internet change on October 11, 2026. Are you ready?
- 1.1.1.1 now supports post-quantum DNSSEC, all 2,420 bytes of it
- How we saved 100 terabytes of memory by optimizing 1.1.1.1’s DNS cache
- BGP ORIGIN attribute manipulation and its impact on the Internet
- Cloudflare Internal DNS is now generally available