{"id":607,"date":"2025-01-02T03:34:32","date_gmt":"2025-01-02T03:34:32","guid":{"rendered":"https:\/\/dnscompetition.in\/articles\/privacy-protection-with-dns-over-https-doh-and-dns-over-tls-dot\/"},"modified":"2025-01-02T03:34:32","modified_gmt":"2025-01-02T03:34:32","slug":"privacy-protection-with-dns-over-https-doh-and-dns-over-tls-dot","status":"publish","type":"post","link":"https:\/\/dnscompetition.in\/pt\/articles\/privacy-protection-with-dns-over-https-doh-and-dns-over-tls-dot\/","title":{"rendered":"Prote\u00e7\u00e3o de privacidade com DNS sobre HTTPS (DoH) e DNS sobre TLS (DoT)"},"content":{"rendered":"<p>In the digital age, privacy and security have become paramount concerns for internet users. One of the fundamental building blocks of internet communication is the Domain Name System (DNS), which translates human-readable domain names into machine-readable IP addresses. However, traditional DNS queries are sent in plain text, making them susceptible to interception and eavesdropping. Fortunately, technologies like DNS over HTTPS (DoH) and DNS over TLS (DoT) offer enhanced privacy protection. In this article, we\u2019ll explore how DoH and DoT work, their differences, and how they contribute to a more secure online experience.<\/p>\n<h2>What is DNS?<\/h2>\n<p>Before delving into DoH and DoT, it&#8217;s essential to understand what DNS is. DNS acts like a phone book for the internet. When you type a web address into your browser, DNS translates that address into an IP address, allowing your browser to locate and connect to the web server hosting the site.<\/p>\n<h2>The Privacy Problem with Traditional DNS<\/h2>\n<p>Traditional DNS queries are transmitted in plaintext, which means that anyone monitoring your internet traffic (like your Internet Service Provider (ISP) or a malicious actor) can see which websites you are visiting. This lack of privacy can lead to potential data breaches, targeted advertising, and other privacy violations.<\/p>\n<h2>What is DNS over HTTPS (DoH)?<\/h2>\n<p><strong>DNS over HTTPS (DoH)<\/strong> is a protocol that encrypts DNS queries using HTTPS, which is the same protocol that secures your web browsing. By sending DNS queries over HTTPS, DoH ensures that your DNS requests are encrypted, making it difficult for third parties to intercept or manipulate DNS traffic.<\/p>\n<h3>Key Features of DoH:<\/h3>\n<ul>\n<li><strong>Encryption:<\/strong> Protects DNS queries from eavesdropping.<\/li>\n<li><strong>Privacy:<\/strong> Hides user browsing habits from ISPs and other entities.<\/li>\n<li><strong>Integrity:<\/strong> Ensures that DNS responses haven\u2019t been tampered with.<\/li>\n<\/ul>\n<h3>Example of a DoH Request<\/h3>\n<p>Here is an example of how a DNS query is sent using DoH:<\/p>\n<pre><code class=\"language-http\">GET \/dns-query?name=example.com&amp;type=A HTTP\/1.1\nHost: dns.example.com\nAccept: application\/dns-json\n<\/code><\/pre>\n<h2>What is DNS over TLS (DoT)?<\/h2>\n<p><strong>DNS over TLS (DoT)<\/strong> is another protocol designed to secure DNS queries, but it works differently than DoH. DoT encrypts DNS traffic using the TLS protocol, which is also used to secure many web communications. Unlike DoH, which runs over the standard HTTPS port (443), DoT typically operates over port 853.<\/p>\n<h3>Key Features of DoT:<\/h3>\n<ul>\n<li><strong>Encryption:<\/strong> Similar to DoH, DoT encrypts DNS queries to protect user privacy.<\/li>\n<li><strong>Dedicated Port:<\/strong> Runs over a specific port (853), which can make firewall configurations easier.<\/li>\n<li><strong>Compatibility:<\/strong> Works with existing DNS infrastructure and is easier to implement for DNS servers.<\/li>\n<\/ul>\n<h3>Example of a DoT Request<\/h3>\n<p>Here\u2019s how a DNS query would look when sent using DoT:<\/p>\n<pre><code class=\"language-plaintext\">Client -&gt; Server: [ClientHello]\nServer -&gt; Client: [ServerHello]\nClient -&gt; Server: [ClientKeyExchange]\nClient -&gt; Server: [Finished]\n<\/code><\/pre>\n<h2>Comparison: DoH vs. DoT<\/h2>\n<table>\n<thead>\n<tr>\n<th>Feature<\/th>\n<th>DNS over HTTPS (DoH)<\/th>\n<th>DNS over TLS (DoT)<\/th>\n<\/tr>\n<\/thead>\n<tbody>\n<tr>\n<td><strong>Port<\/strong><\/td>\n<td>Uses port 443 (HTTPS)<\/td>\n<td>Uses port 853<\/td>\n<\/tr>\n<tr>\n<td><strong>Encryption<\/strong><\/td>\n<td>Yes, via HTTPS<\/td>\n<td>Yes, via TLS<\/td>\n<\/tr>\n<tr>\n<td><strong>Traffic Obfuscation<\/strong><\/td>\n<td>DNS queries look like regular HTTPS traffic<\/td>\n<td>DNS queries are distinct but encrypted<\/td>\n<\/tr>\n<tr>\n<td><strong>Performance<\/strong><\/td>\n<td>Can be faster due to HTTP\/2 multiplexing<\/td>\n<td>Generally lower latency<\/td>\n<\/tr>\n<tr>\n<td><strong>Adoption<\/strong><\/td>\n<td>Increasingly popular in browsers<\/td>\n<td>Supported by various DNS servers<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<h2>Benefits of Using DoH and DoT<\/h2>\n<ol>\n<li>\n<p><strong>Enhanced Privacy:<\/strong> Both DoH and DoT help protect users\u2019 browsing habits by encrypting DNS queries, preventing third parties from spying on users\u2019 online activities.<\/p>\n<\/li>\n<li>\n<p><strong>Security Against DNS Spoofing:<\/strong> By encrypting DNS traffic, these protocols help guard against attacks like DNS spoofing, where an attacker can inject malicious responses.<\/p>\n<\/li>\n<li>\n<p><strong>User Control:<\/strong> Many modern browsers and applications allow users to choose between DoH and DoT, giving them control over their security preferences.<\/p>\n<\/li>\n<li>\n<p><strong>Improved Performance:<\/strong> DoH can take advantage of HTTP\/2 multiplexing, which can lead to faster DNS resolution times.<\/p>\n<\/li>\n<\/ol>\n<h2>Implementing DoH and DoT<\/h2>\n<h3>Configuring DNS over HTTPS<\/h3>\n<p>To set up DoH, you can configure your browser or operating system settings to use a DoH-compatible DNS provider. Here\u2019s how to enable DoH in a popular browser like Firefox:<\/p>\n<ol>\n<li>Open Firefox and<\/li>\n<\/ol>\n","protected":false},"excerpt":{"rendered":"<p>In the digital age, privacy and security have become paramount concerns for internet users. One of the fundamental building blocks of internet communication is the Domain Name System (DNS), which translates human-readable domain names into machine-readable IP addresses. However, traditional DNS queries are sent in plain text, making them susceptible to interception and eavesdropping. Fortunately, [&hellip;]<\/p>\n","protected":false},"author":5,"featured_media":608,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[4],"tags":[6,22,92,93,85,87,86,88,90,55,91,89,58,95,94],"class_list":["post-607","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-articles","tag-anonymity","tag-cybersecurity","tag-data-protection","tag-digital-privacy","tag-dns-over-https","tag-dns-over-tls","tag-doh","tag-dot","tag-encryption","tag-internet-security","tag-network-security","tag-online-privacy","tag-privacy","tag-secure-browsing","tag-web-security"],"acf":[],"_links":{"self":[{"href":"https:\/\/dnscompetition.in\/pt\/wp-json\/wp\/v2\/posts\/607","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/dnscompetition.in\/pt\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/dnscompetition.in\/pt\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/dnscompetition.in\/pt\/wp-json\/wp\/v2\/users\/5"}],"replies":[{"embeddable":true,"href":"https:\/\/dnscompetition.in\/pt\/wp-json\/wp\/v2\/comments?post=607"}],"version-history":[{"count":0,"href":"https:\/\/dnscompetition.in\/pt\/wp-json\/wp\/v2\/posts\/607\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/dnscompetition.in\/pt\/wp-json\/wp\/v2\/media\/608"}],"wp:attachment":[{"href":"https:\/\/dnscompetition.in\/pt\/wp-json\/wp\/v2\/media?parent=607"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/dnscompetition.in\/pt\/wp-json\/wp\/v2\/categories?post=607"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/dnscompetition.in\/pt\/wp-json\/wp\/v2\/tags?post=607"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}