Response: DOH! DNS over HTTPS explained – APNIC Blog – Packet Pushers

Geoff Huston provides a fine overview on progress on DNS over HTTPS. To my thinking, its a matter of time until this becomes a standard followed a decade or two of gradual implementation. I’m thinking the rollout will happen at “IPv6 speed”. We don’t have to have it but we do need it over time.

Participation in the IETF seems to be broad. I know that Google and Cloudflare have released working implementations (both companies are interested in preventing service providers from using DNS data as a revenue stream).

Currently, the IETF DOH Working Group is attempting to standardize DNS over HTTPs. The effort is directed to standardizing encodings for DNS queries and responses that are suitable for use in HTTPS, enabling a standard and interoperable mechanism for DNS names to be resolved over secure TCP connections using the HTTP/2 protocol. It’s a hybrid approach that attempts to integrate standard HTTP methods, error codes, and other semantics to the greatest extent possible, while still preserving the query response nature of the ‘traditional’ DNS name resolution protocol and the DNS resolution protocol format.

DOH! DNS over HTTPS explained | APNIC Blog : https://blog.apnic.net/2018/10/12/doh-dns-over-https-explained/

Appendix

Link: DNS-over-HTTPS  |  Public DNS  |  Google Developers – https://developers.google.com/speed/public-dns/docs/dns-over-https

Link: DNS over HTTPS – Cloudflare Resolver – https://developers.cloudflare.com/1.1.1.1/dns-over-https/