DNS-over-HTTPS Awesome List

Resources for DNS over HTTPS organised by AP Lens DNS Firewall. Encrypted DNS setup and helpful tips. #DOH #Privacy #APLens

Contents

• Basic knowledge
• News & Blog post
• Set-up on devices
  1. On Browsers
     • Firefox
     • Chrome
     • Edge
  2. On Operating Systems
     • Windows 10
     • Androids
     • IOS
     • Openwrt
  3. Own DNS-over-HTTPS (DoH) server (Open Source)
• Useful Websites

Basic knowledge

DNS over HTTPS(DoH) protocol is that the communication is encrypted using built-in application HTTPS standards. It was first introduced in October 2018 (IETF RFC 8484) with a goal of increasing user security and privacy. With DNS over HTTPS (DoH), DNS queries and responses are encrypted and sent via the HTTP or HTTP/2 protocols. DoH ensures that attackers cannot forge or alter DNS traffic. DoH uses port 443, the standard HTTPS traffic port, to wrap the DNS query in an HTTPS request.

Pros of DoH

• Encrypting DNS name resolution traffic helps to hide your online activities.
• Prevent DNS spoofing and man-in-the-middle (MitM) attacks
• Protect sensitive information that DNS hijacking methodologies employ and obfuscate data that could be sniffed by third-party observers and ISPs.
• load time performance is typically improved.

Cons of DoH

• Overrides any sort of DNS filtering your network is doing to provide insight into security and your network info
• False-negative security flags and blocked queries can be generated if the system administrator is unfamiliar with DoH or similar protocols

News & Blog post

• Encryption to See Rise in Adoption Across All Verticals
• What Is Encrypted DNS? 4 Top Providers to Improve Online Privacy and Security
• DNS Over HTTPS: Facts You Should Know
• Android 13 finally adds native support for DNS over HTTPS
• DNS Over HTTPS: 3 Strategies for Enterprise Security Monitoring

Set-up on devices

On Browsers

Firefox

• Firefox DNS-over-HTTPS Guideline by Firefox Official website

Chrome

• Enable DNS Over HTTPS (DoH) in Chrome Guidelines for enabling DoH in Chrome by technipages.com.

Edge

• Enable DoH in Microsoft Edge Guidelines provided by Cloudflare

On Operating Systems

Windows 10

• Enabling DNS over HTTPS via Windows 10 Settings Guidelines of setting up DoH in Windows 10

Androids

• Android set up DoH - Guidelines of setting up DoH in Android

IOS

• IOS set up DoH Guidelines of setting up DoH in IOS by Quad9
• encrypted-dns-configs – Configuration file of DoH in IOS provided by Github

Openwrt

• Method for setting up DoH on OpenWrt It describes the method for setting up DNS over HTTPS on OpenWrt.

Own DNS-over-HTTPS (DoH) server (Open Source)

• DNS-over-HTTPS in Github Guidelines for setting up your own DoH server.
• DNS Proxy Server DNS proxy server that supports DNS protocols including DNS-over-TLS, DNS-over-HTTPS.

Useful Website

• AP-Lens - Whitelist DNS providing network isolation
• ITECHTICS - Technology blog focusing on Windows news and updates, latest downloads, software tips and tricks, and troubleshooting guides.
• Cloudflare - One of the world's largest networks that powers more than 10 trillion requests per month.
• Security Boulevard - Serve the security and related communities by providing a single destination for information, education and discourse on the leading topics and issues facing the security
• Microsoft Learn
• Google Public DNS
• APNIC - Regional Internet Registry administering IP addresses for the Asia Pacific