The DoHs and DoTs of DNS Encryption

Data encryption protects data in motion from eavesdropping, securing the privacy of such data. Historically, DNS data was considered benign even if intercepted, but today’s modern cybersecurity frameworks such as zero trust seek to minimize exposure of all data in motion including DNS queries and responses, which it turns out may not be so benign after all. We’ll discuss leading DNS encryption techniques including DNS over TLS (DoT), DNS over HTTPS (DoH), DNS over QUIC (DoQ), and others, as well as deployment scenarios.