DNS Encryption explained - DNS over TLS (DoT) & DNS over HTTPS (DoH)

I'll explain what DNS encryption is about. How does it technically work, why should we all care about, and which role does it play in the IT industry?

Follow me:

Timestamps:

00:00 - Introduction
01:14 What is DNS encryption and why do we need it?
02:48 How do DNS requests work?
04:21 DNS over TLS
07:06 DNS over HTTPS (DoH)
09:34 Concerns with DoH implementation

________________
All links with "*" are affiliate links.

[jojimerc]

This channel is very helpful for DevOps.

[mohsen]

Perfect Content and clear explanation! Kudos to you!
Please make more of this kinds of technical/conceptual videos related to security topics which are a great help for other IT/Network enthusiastic individuals such as myself!

[mrd]

Very interesting topic! New to your channel!

[goks]

Awesome content, had been banging my head on such concepts. Request you to explain how to capture the data via Wireshark.

[zeytee]

Very helpful and makes learning easy. I watched it twice to digest all details well.

[GamesOfficialYouTube]

So so you recommend IPS DNS or CloudFlare DNS over HTPPS? Great video btw

[payambakhshi]

Centralized or De-Centralized, that's the question too :), thanks for the nice video

[markpelayo]

Thank you for your video. I have a question what do you think would be faster DoH or DoT?

[aeroxx]

Thanks for the knowledge. So these techniques still need to be supported by the hosters/sites to make it fully encrypted?
I am just wondering if its really better to send the dns query via cloud based providers instead of „trusting/rely“ on your ISP. Probably depends on the country and their laws

[mario_vasquez_]

very good. demoing with wireshark was very useful. thank you and please keep making videos like this.

[nands]

1:51 You mean they can see just SNI right as protocol will be SSL

[alimahaboob]

I want to see the configuration you did for stubby.yml file. Could you please share?

[bysl]

Can zone transfers also be done the same?

[dilipdilipjohn]

How these settings are turned on..?
(Using DNS over WARP)

[beydoin]

Do you have a tutorial on how to set it up on named?

[harshavmb]

How does the performance impact look here? DNS under 512 bytes is a UDP query, super fast. Most machines cache the results locally, but resolvers usually don't cache. They may have to take more burden of responding to users queries by encrypting, decrypting, additional payload etc.,
Also I'm not sure if bind daemon supports these protocols as it's widely used.

[NumberVaderfan]

6:20 im not getting a response from stubby, it stays stuck on "Starting DAEMON..." anyone got an idea why this might be happening to me?

[gugaucb]

How can I to config on bind9 fowarders?

[sshadyh]

if you are using a VPN does it matter ?

[Mohamed-scso]

Greeting, hope help me.
1- i set my machine network(i donot do any change for router only change my machine) to use "1.0.0.2 & 1.1.1.2" as dns server, they belong to cloudfloar.

2- is that mean all my machine dns quire encrypted (dns over https)?

3- when i go to cloudfloar test page the results was i do not use dns over https. Also when activate the dns over https in Firefox the results was "we do not know if you use dns over https or not".

4- there's any steps i should do beside set machine network to use clodfloar dns server, to be sure i use dns over https?

Thanks in advance