What is DNS-over-HTTPS?
When you type a web address or domain name into your address bar (example: www.mozilla.org), your browser sends a request over the Internet to look up the IP address for that website.
Traditionally, this request is sent to servers over a plain text connection. This connection is not encrypted, making it easy for third-parties to see what website you’re about to access.
DNS-over-HTTPS (DoH) works differently. It sends the domain name you typed to a DoH-compatible DNS server using an encrypted HTTPS connection instead of a plain text one. This prevents third-parties from seeing what websites you are trying to access.
Benefits
DoH improves privacy by hiding domain name lookups from someone lurking on public WiFi, your ISP, or anyone else on your local network. DoH, when enabled, ensures that your ISP cannot collect and sell personal information related to your browsing behavior.
Any risk?
Some individuals and organizations rely on DNS to block malware, enable parental controls, or filter your browser’s access to websites. When enabled, DoH bypasses your local DNS resolver and defeats these special policies.
Enabling and disabling DNS-over-HTTPS
1. Click the menu button
and choose 'Preferences'.2. In the 'General' panel, scroll down to 'Network Settings' and click the 'Settings' button.
3. In the dialog box that opens, scroll down to Enable DNS over HTTPS.
4. Click 'OK' to save your changes and close the window.
Notes
- This setting will only be on by default in the U.S. although you can enable it manually as above.
https://www.theguardian.com/technology/2019/sep/24/firefox-no-uk-plans-to-make-encrypted-browser-tool-its-default
- Firefox by default directs DoH queries to DNS servers that are operated by CloudFlare, but you can select any DoH-compatible DNS server you wish. Some examples are listed on the following Github link.
https://github.com/curl/curl/wiki/DNS-over-HTTPS
- Google Chrome is also testing this security feature and will incorporate it into their browser at some point.
Safe browsing!
