DNS over HTTPS
also: DoH, DNS-over-HTTPS
DNS over HTTPS (DoH) is a protocol that encrypts DNS queries and responses by tunneling them through HTTPS, preventing ISPs and network monitors from seeing which domains a user visits.
DNS over HTTPS encrypts the Domain Name System (DNS) traffic that normally travels unencrypted over port 53. Instead of sending plaintext DNS queries to your resolver, DoH wraps them inside encrypted HTTPS requests on port 443.
This prevents intermediate network actors—such as your ISP, WiFi provider, or network administrator—from observing which websites you're attempting to access. For example, when you visit example.com, a traditional DNS lookup broadcasts this request in clear text; with DoH, the query is encrypted and hidden inside an HTTPS connection.
Common DoH providers include Cloudflare (1.1.1.1), Google DNS (8.8.8.8), and others. Most modern browsers (Firefox, Chrome, Edge) support DoH natively, and Linux systems can configure it through resolvers like systemd-resolved or tools like dnscrypt-proxy.