Comment on Pi-Hole question regarding unbound and cloudflared
Darkassassin07@lemmy.ca 1 month agoDoH on the lan between devices is completely pointless; I’m talking about DoH between the lan and external dns which unbound does NOT do.
Comment on Pi-Hole question regarding unbound and cloudflared
Darkassassin07@lemmy.ca 1 month agoDoH on the lan between devices is completely pointless; I’m talking about DoH between the lan and external dns which unbound does NOT do.
irotsoma@lemmy.blahaj.zone 1 month ago
DNS over TLS handles that. No need for DoH really. Unless DNS ports are blocked or captured by NAT or something and you need to use port 443 with DoH. At least not with a DNS server. DoH is useful for individual applications to do their own DNS lookups bypassing the OS or network level DNS. Otherwise DoH and DoT provide the same basic protection. DoT is just at a lower network layer and thus applies more broadly across the network or OS rather than being application or resolver specific. There’s never been a real need for a DNS server to use DoH instead of DoT unless DoT is blocked upstream.