
10/29/2019 · Peter Wu
What this post added
This post explains the concepts and mechanisms behind DNS over TLS (DoT) and DNS over HTTPS (DoH), detailing how they encrypt DNS queries and responses to enhance user privacy and security. It contrasts unencrypted DNS with these encrypted methods, illustrating the packet structures and TLS handshake involved in DoT, and the use of HTTPS for DoH. The post also discusses potential attacks like SSL stripping and the advantages of DoH in using standard HTTPS ports to avoid firewall blocking.