What Is DNS over HTTPS?
Normal DNS lookups travel in plain text, so your ISP or anyone on the network can see every domain you request. DNS over HTTPS, or DoH, wraps those lookups in encryption so they're private.
Advertisement
Why it matters
- Privacy: your ISP and network can no longer read your DNS requests.
- Security: it's much harder for an attacker to redirect you with forged DNS answers.
- Integrity: it helps prevent tampering on untrusted networks.
How to turn it on
- In Chrome or Edge, open Settings, then Privacy and security, then Security, and enable 'Use secure DNS'.
- In Firefox, open Settings, scroll to Network Settings, and enable DNS over HTTPS.
- On Android, set Private DNS to one.one.one.one (Cloudflare) under Network settings.
- Pick a provider that supports DoH, such as Cloudflare or Google.
DoH vs DoT
DNS over TLS (DoT) does the same job but on its own dedicated port, which makes it easier for networks to block or manage. DoH blends in with normal web traffic. For most people, either is a solid upgrade over plain DNS.