DNS-over-HTTPS (DoH)

Costas

Administrator
Staff member
DNS over HTTPS will work only if your configured DNS server has DoH support. You might need to change your DNS server to take advantage of DoH.

We recommend using Google’s own Google Public DNS or Cloudflare, which is the default DNS server when DoH is enabled for Firefox. Google has a list of DNS providers Chrome can use DoH with, including Cleanbrowsing, Comcast, DNS.SB, OpenDNS, and Quad9.

You can check to see if DNS over HTTPS is working in Chrome by visiting Cloudflare’s Browsing Experience Security Check. Run the test by clicking the button and see whether “Secure DNS” is enabled or not.

Fortunately, DNS over HTTPS is becoming standard by default soon. Google plans to enable DoH by default in Chrome 81.    (src)



The quick way is to use the browser builtin support :

Chrome :

<code>chrome://flags/#dns-over-http</code>


enable it, then you have to set the DoH server throught the common TCP/IPv4 Properties (howto)


^in this way you can use DoH DNS Server as IP only. Now days the most common is to use DoH with hostname, to do it on Chrome you have to start it with command arguments more

Firefox :

@ options > network > connection, is ready to go with hostname
jacgYir.png


 

Using DNS over HTTPS (DoH) with OpenDNS




DoH Servers
list by andreas - https://github.com/curl/curl/wiki/DNS-over-HTTPS

<code>https://adblock.mydns.network/dns-query - Anycast (Cloudflare) / DNSSEC / DDoS
https://dns.adguard.com/dns-query
https://doh.tiarap.org/dns-query - Malware / DNSSEC</code>

https://ads-doh.securedns.eu/dns-query - DNSSEC
https://doh.dnswarden.com/adblock - DNSSEC
https://dns-nyc.aaflalo.me/dns-query
https://dns.aaflalo.me/dns-query - DNSSEC
https://doh.tiar.app/dns-query - Malware / DNSSEC
https://dns.oszx.co/dns-query - DNSSEC
https://dns.nextdns.io/dns-query
https://example.doh.blockerdns.com/dns-query




DNS-over-HTTPS (DoH) providers not classified as "Proxy & VPN"
https://community.cleanbrowsing.org/topic/dns-over-https-doh-providers-not-classified-as-proxy-vpn-or-similar/



Apart from browser / os setup, you can achieve the same using a DNS proxy application

DoH Proxy
https://dnscrypt.info/implementations/   (Simple DNSCrypt recommended)

other DNS Proxy applications</b>
https://mayakron.altervista.org/wikibase/show.php?id=AcrylicHome

https://chrome.google.com/webstore/detail/domain-blocker/ggdcjplapccgoinblmidpkoocfafajfa

https://github.com/coredns/coredns

https://adguard.com/en/adguard-dns/overview.html



Guide to Changing Your DNS Server on any device

Cloudflare Secure DNS

On windows at TCP/IPv4 Properties use
Primary DNS : 1.1.1.1
Secondary DNS : 1.0.0.1


On android use the app.


31/03/2020 - Cloudflare's 1.1.1.1 (KPMG audit)
 
Top