DoH vs. DNS over TLS: Understanding the Differences

Imagine you're sending a secret message to a friend. You want to make sure no one else can read it, right? That's what encryption is like—it keeps your information safe from prying eyes.

When you use the internet, your computer sends requests to websites. These requests go through a special system called DNS (Domain Name System), like a phone book for the internet. DNS translates the website's name (like google.com) into an address that computers understand.

The problem is, your DNS requests used to be sent without any encryption. Anyone could see what websites you were visiting! That's like sending your secret message in plain sight!

To solve this, there are two methods: DNS over HTTPS (DoH) and DNS over TLS (DoT). Both methods are like putting your secret message in a locked box! Let's explore the differences between these two methods:

What is DNS over HTTPS (DoH)?

DoH sends your DNS requests through HTTPS, the same secure connection you use for online banking and shopping. It's like sending your secret message inside a regular letter—it looks like any other letter, but only your friend can open it.

This makes it harder for anyone to snoop on your DNS requests. Think of it like sending your secret message through a secret tunnel!

How to Enable DoH

Enabling DoH is simple! You can do it directly in your browser. Here's how to do it in Google Chrome:

1. Open Chrome and go to Settings.
2. Click on Privacy and security.
3. Select Security.
4. Under Advanced, find Use secure DNS and turn it on.
5. Select With and choose Cloudflare (https://1.1.1.1).

Now your DNS requests are encrypted using DoH!

What is DNS over TLS (DoT)?

DoT uses another secure protocol called TLS to encrypt your DNS requests. It's like putting your secret message in a locked box with a specific key only your friend has.

While DoH hides your DNS requests inside regular internet traffic, DoT doesn't hide the fact that it's a DNS request. However, the content is still encrypted.

How to Set Up DoT

Setting up DoT can be a bit more technical. It usually involves changing settings on your device or router, which affects all DNS requests from your computer.

Here's an example of how to set up DoT on an Android phone:

1. Open Settings on your Android phone.
2. Go to Network & internet then Private DNS.
3. Select Private DNS provider hostname.
4. Enter the hostname of a DoT provider (like dns.google for Google DNS).
5. Save the settings.

Key Differences Between DoH and DoT

Here's a table summarizing the key differences:

Which Should You Use?

Both DoH and DoT offer improved online privacy and security, but the best choice depends on your preference:

• DoH: Good for easy setup and control in individual apps and browsers.
• DoT: Good for whole-device encryption and works across all applications.

Practical Example: Using Cloudflare's DNS

You can use both DoH and DoT with Cloudflare's DNS, a popular and secure provider:

For DoH:

• Google Chrome: Follow the steps in the "How to Enable DoH" section above.

For DoT:

• Windows PC:
  1. Open Command Prompt as an administrator.
  2. Type netsh interface ipv4 set dns name="your-connection-name" static 1.1.1.1 primary validate=no.
  3. Configure secondary DNS: netsh interface ipv4 add dns name="your-connection-name" addr=1.0.0.1 index=2.

These commands will configure your Windows computer to use Cloudflare's DoT service.

By understanding the differences between DoH and DoT and knowing how to set them up, you can make your online activities more private and secure! Choose the method that works best for you and start browsing with confidence!