Lekcje modułu (2/3)
DoT i DoH
DoT and DoH
DNS over TLS (DoT) and DNS over HTTPS (DoH) encrypt the connection between a client and a recursive resolver. They help prevent nearby network observers from reading or changing DNS messages on that link. The resolver still sees the query, so its operator and policies matter.
DoT uses a dedicated DNS-over-TLS connection. DoH carries DNS messages over HTTPS and can share web infrastructure. Neither method proves that the answer is correct; DNSSEC validation addresses data authenticity. Encrypted transport also does not hide all metadata, such as the destination resolver’s IP address or timing.
Choose a resolver deliberately, understand how the device selects it, and avoid assuming that encryption alone makes a lookup private end to end.
Check your understanding
Choose the best answer. This quiz runs locally and sends no DNS queries to real domains.
What do DoT and DoH primarily protect?