RFC 8484: DNS Queries over HTTPS (DoH)

This document defines a protocol for sending DNS queries and getting DNS responses over HTTPS. Each DNS query-response pair is mapped into an HTTP exchange.

Read RFC 8484 on the RFC Editor

Outgoing relationships (1 related RFC)

Informative reference — RFC 2818: HTTP Over TLS

Incoming relationships (34 related RFCs)

Normatively referenced by — RFC 9460: Service Binding and Parameter Specification via the DNS (SVCB and HTTPS Resource Records)
Normatively referenced by — RFC 9462: Discovery of Designated Resolvers
Normatively referenced by — RFC 9230: Oblivious DNS over HTTPS
Normatively referenced by — RFC 9461: Service Binding Mapping for DNS Servers
Normatively referenced by — RFC 8881: Network File System (NFS) Version 4 Minor Version 1 Protocol
Normatively referenced by — RFC 8683: Additional Deployment Guidelines for NAT64/464XLAT in Operator and Enterprise Networks
Normatively referenced by — RFC 9953: DNS over CoAP (DoC)
Normatively referenced by — RFC 8932: Recommendations for DNS Privacy Service Operators
Normatively referenced by — RFC 9540: Discovery of Oblivious Services via Service Binding Records
Informatively referenced by — RFC 9499: DNS Terminology
Informatively referenced by — RFC 8914: Extended DNS Errors
Informatively referenced by — RFC 9463: DHCP and Router Advertisement Options for the Discovery of Network-designated Resolvers (DNR)
Informatively referenced by — RFC 8901: Multi-Signer DNSSEC Models
Informatively referenced by — RFC 8744: Issues and Requirements for Server Name Identification (SNI) Encryption in TLS
Informatively referenced by — RFC 8782: Distributed Denial-of-Service Open Threat Signaling (DOTS) Signal Channel Specification
Informatively referenced by — RFC 9076: DNS Privacy Considerations
Informatively referenced by — RFC 9103: DNS Zone Transfer over TLS
Informatively referenced by — RFC 9458: Oblivious HTTP
Informatively referenced by — RFC 9849: TLS Encrypted Client Hello
Informatively referenced by — RFC 8973: DDoS Open Threat Signaling (DOTS) Agent Discovery
Informatively referenced by — RFC 9464: Internet Key Exchange Protocol Version 2 (IKEv2) Configuration for Encrypted DNS
Informatively referenced by — RFC 9520: Negative Caching of DNS Resolution Failures
Informatively referenced by — RFC 9526: Simple Provisioning of Public Names for Residential Networks
Informatively referenced by — RFC 8686: Application-Layer Traffic Optimization (ALTO) Cross-Domain Server Discovery
Informatively referenced by — RFC 9267: Common Implementation Anti-Patterns Related to Domain Name System (DNS) Resource Record (RR) Processing
Informatively referenced by — RFC 9445: RADIUS Extensions for DHCP-Configured Services
Informatively referenced by — RFC 9505: A Survey of Worldwide Censorship Techniques
Informatively referenced by — RFC 9517: A URN Namespace for the Data Documentation Initiative (DDI)
Informatively referenced by — RFC 9606: DNS Resolver Information
Informatively referenced by — RFC 9614: Partitioning as an Architecture for Privacy
Informatively referenced by — RFC 9704: Establishing Local DNS Authority in Validated Split-Horizon Environments
Informatively referenced by — RFC 9726: Operational Considerations for Use of DNS in Internet of Things (IoT) Devices
Informatively referenced by — RFC 9761: Manufacturer Usage Description (MUD) for TLS and DTLS Profiles for Internet of Things (IoT) Devices
Informatively referenced by — RFC 9989: Domain-Based Message Authentication, Reporting, and Conformance (DMARC)