Improving DNS Privacy with Oblivious DoH in 1.1.1.1

What this post added

This post introduces Oblivious DNS over HTTPS (ODoH), a new proposed DNS standard co-authored by Cloudflare engineers. ODoH enhances DNS privacy by separating IP addresses from DNS queries using a proxy and public key encryption. It ensures that no single entity can see both the query and the client's IP address simultaneously. The post details the ODoH message flow, the roles of the target, proxy, and client, and the cryptographic mechanisms (HPKE, DNSSEC) involved. It also addresses performance considerations, showing that the additional encryption overhead is marginal.