DDR
Discovery of Designated Resolvers, a mechanism that lets clients learn encrypted DNS services associated with an existing resolver. It can upgrade local DNS service from plaintext to an authenticated encrypted transport.
Category glossary
Search all termsEncrypted DNS
8 definitions associated with Encrypted DNS.
DNR
Discovery of Network-designated Resolvers, DHCP and IPv6 Router Advertisement options that tell clients about encrypted DNS resolvers selected by the network. It complements DDR, which discovers encrypted service from an existing resolver.
DNS over CoAP (DoC)
A mapping of DNS messages to the Constrained Application Protocol for constrained environments. Security is provided by the applicable CoAP security mechanisms.
DNS over HTTPS (DoH)
DNS carried in HTTPS, typically over TCP port 443. DoH provides transport confidentiality and server authentication while sharing web infrastructure and policy considerations.
DNS over QUIC (DoQ)
DNS carried over QUIC with encrypted, multiplexed transactions and no TCP head-of-line blocking between streams. The default port is 853.
DNS over TLS (DoT)
DNS carried over a dedicated TLS connection, normally TCP port 853. It encrypts resolver traffic and authenticates the selected resolver when certificates are validated.
ODoH
Oblivious DNS over HTTPS separates the client's network identity from its DNS query by using a proxy and an encrypted message for a target resolver. The proxy sees the client but not plaintext query content, while the target sees the query but not the original client address.
Option 162
The DHCPv4 Discovery of Network-designated Resolvers option, used to advertise encrypted DNS resolver information to clients.