DoT
DoT (DNS over TLS) encrypts DNS queries and responses using TLS over a dedicated port, 853, separate from ordinary DNS traffic on port 53. It serves the same privacy and integrity goal as DoH -- preventing on-path observation or tampering with DNS lookups -- but keeps DNS traffic on its own recognizable port rather than blending it into regular HTTPS traffic, which makes it easier for network administrators to identify and manage deliberately, at the cost of being easier to block outright. DoT is defined in RFC 7858 and is commonly supported by operating-system DNS settings and some router firmware.
By AdminKit team, Netbase JSC · Updated