Welcome to the Advanced DNS Security Discussion Area!

[jennaqualls]

Welcome to the Advanced DNS Security discussion area! Here, you can engage in conversations about Advanced DNS Security, explore new insights, and stay updated on ongoing discussions.

Check back regularly for the latest updates and community insights on Advanced DNS Security.

[zika56fery]

Hello,
DNS over HTTPS (DoH) and DNS over TLS (DoT) are becoming increasingly prevalent. These protocols encrypt DNS queries, significantly enhancing user privacy by preventing eavesdropping and making it harder to distinguish DNS traffic from other web traffic (DoH) or providing a clear separation (DoT).         catsounds

Best Regards

[P-Nielsen]

There are App-ID's now for both.

DNS over HTTPS (DoH) is a protocol for performing remote Domain Name System (DNS) resolution via the HTTPS protocol. For the ssl traffic coverage, this AppID only covers well known servers . It does not cover privately setup DoH servers.

DNS over TLS (DoT) is a security protocol for encrypting and wrapping Domain Name System (DNS) queries and answers via the Transport Layer Security (TLS) protocol. Decrypted traffic will be covered by dns appid, and this appid only covers the ssl traffic google, cloudflare and quad9. If a private DNS over TLS server is setup then this App-ID cannot identify that traffic without decryption.