What is the purpose of DNS over TLS and DNS over HTTPS?

Question

Options

• ATo improve DNS performance
• BTo provide secure communication between DNS clients and servers
• CTo reduce DNS query times
• DTo allow DNS servers to communicate securely with each other

• A
  2% (1)
• B
  90% (38)
• C
  5% (2)
• D
  2% (1)

Explanation

DNS over TLS (DoT) and DNS over HTTPS (DoH) were designed specifically to encrypt DNS traffic, preventing eavesdropping and tampering as queries travel between a client (your device) and its resolver - making B correct. Performance (A) and reduced query times (C) are wrong because encryption actually adds a small overhead; speed is never the goal of DoT/DoH. Option D is a common trap - these protocols secure client-to-resolver communication, not resolver-to-resolver or server-to-server traffic (that's a different concern handled by DNSSEC and similar mechanisms).

Memory tip: Think of the "S" in HTTPS - it stands for Secure. DoH literally wraps DNS in HTTPS, so just remember: both protocols borrow the "S" from their transport to bring security to DNS queries.

No community discussion yet for this question.