DNS over HTTPS
Sending DNS queries and answers inside HTTPS (RFC 8484), so they are encrypted and can be made from places like browsers and web workers.
What it means
DoH wraps ordinary DNS messages in HTTPS requests to a resolver's URL, such as Google Public DNS's https://dns.google/dns-query. The traffic is encrypted and looks like other web traffic, which protects lookups from eavesdropping on the network path.
Web tools use DoH because browsers and serverless platforms cannot send raw DNS packets. Google Public DNS also offers a JSON form of the API.
Answers come from the chosen resolver, with its cache, so they can briefly differ from the authoritative data like any recursive lookup.
Related terms
Sources
What this definition rests on. The wording is ours; the facts are theirs.
- RFC 8484: DNS Queries over HTTPS (DoH)rfc-editor.org
- Google Public DNS: DNS-over-HTTPSdevelopers.google.com
All 432 terms in the glossaryThe wiki: blocklists and bounce codes