DoH
DoH (DNS over HTTPS) sends DNS queries and responses inside an encrypted HTTPS connection instead of the traditional unencrypted UDP/TCP port 53 traffic, so an observer on the network -- an ISP, a public Wi-Fi operator, or an attacker -- can't read or tamper with which domains are being looked up. Many modern browsers now enable DoH by default to a chosen resolver, which can bypass network-level DNS filtering or parental controls configured elsewhere on the network, a tradeoff worth knowing about if a device seems to ignore DNS-based blocking. DoH is defined in RFC 8484.
By AdminKit team, Netbase JSC · Updated