CleanBrowsing

What is encrypted DNS?

Encrypted DNS wraps DNS queries inside encrypted protocols such as DNS-over-HTTPS (DoH) and DNS-over-TLS (DoT). Traditional DNS requests are sent in plaintext, making them vulnerable to eavesdropping, tracking, and manipulation. Encrypted DNS solves this by securing the queries, improving user privacy and helping prevent DNS-based attacks like spoofing or hijacking.

What is DNS-over-HTTPS (DoH)?

DoH sends DNS queries over the same HTTPS protocol used for secure websites. This makes DNS requests blend in with regular web traffic. CleanBrowsing supports DoH with endpoints for Family, Adult, and Security filters.

What is DNS-over-TLS (DoT)?

DoT encrypts DNS using Transport Layer Security (TLS), typically on port 853. It provides strong privacy without tunneling through HTTPS. CleanBrowsing provides DoT endpoints for all filter types.

What are the benefits of DNS encryption?

Encrypted DNS prevents ISPs or networks from tracking browsing behavior, stops third-party DNS injection or manipulation, secures public Wi-Fi usage by protecting DNS traffic, and helps enforce parental controls and filtering rules consistently.