What is DNS over HTTPS?
A protocol for performing DNS resolution via the HTTPS protocol. It encrypts DNS queries, preventing ISPs, network administrators, and attackers from seeing which websites you're trying to visit.
Also known as: DoH
DNS over HTTPS (DoH) encrypts your DNS queries, hiding the websites you visit from your ISP and network observers. Traditional DNS queries are sent in plain text, allowing anyone on the network to see your browsing history.
The DNS Privacy Problem
When you type "protonmail.com" in your browser:
Without DoH
- Your device asks a DNS server: "What's the IP for protonmail.com?"
- This query is sent unencrypted
- Your ISP, network admin, or attacker can see you're visiting ProtonMail
- Even if the website uses HTTPS, the DNS query reveals your intent
With DoH
- Your DNS query is encrypted using HTTPS
- Only you and the DNS provider can see the query
- Network observers see encrypted traffic, nothing more
Benefits
- Privacy from ISP: They can't log your DNS queries
- Protection from DNS hijacking: Attackers can't redirect you to malicious sites
- Bypasses some censorship: DNS-based blocking becomes ineffective
Considerations
- Trust shifts to DoH provider: Choose a privacy-respecting provider
- Corporate networks: May conflict with internal DNS/filtering
- Not complete privacy: IP addresses can still reveal destinations
How to Enable
- Firefox: Settings → Privacy & Security → Enable DNS over HTTPS
- Chrome: Settings → Privacy and Security → Use secure DNS
- System-wide: Configure your OS or router to use DoH
Related Terms
DNS
Domain Name System—the internet's phone book. DNS translates human-readable domain names (example.com) into IP addresses (93.184.216.34) that computers use to connect. Every website visit triggers DNS lookups, which can reveal your browsing to your ISP or DNS provider.
Encryption
The process of converting information into a code to prevent unauthorized access. Encryption transforms readable data (plaintext) into an unreadable format (ciphertext) using a cryptographic algorithm and key. Only those with the correct key can decrypt and read the original data.
HTTPS
Hypertext Transfer Protocol Secure is the encrypted version of HTTP, the protocol used to transfer data between your browser and websites. HTTPS uses TLS encryption to protect the confidentiality and integrity of data in transit, preventing eavesdropping and tampering.
Related Tools
Have more questions?
Use our guided flow to get the right next privacy step for DNS over HTTPS.
Open Guided Flow