• 0 Posts
  • 7 Comments
Joined 3 years ago
cake
Cake day: July 2nd, 2023

help-circle




  • I’m not going to pretend to be a network engineer but DNS over HTTPS is not intended to be used to bypass network restrictions, and as such to remain secure still needs you to match up a domain to an ip address to make your HTTPS request in a secure context. This means that either they (1) hard code in a pairing of ip address and domain, or (2) connect to first a normal dns server using standard ports then use that to get the associated between their secured DNS over HTTPS service. The first is harder to block for sure, the second is probably the way a normal human would implement it and is still largely effective.