rfc-9230

Oblivious DNS over HTTPS

E. Kinnear, P. McManus, T. Pauly, T. Verma, C.A. Wood

date2022-06 streamINDEPENDENT statusEXPERIMENTAL pages19 canonicalhttps://www.rfc-editor.org/rfc/rfc9230 doi10.17487/RFC9230

This document describes a protocol that allows clients to hide their IP addresses from DNS resolvers via proxying encrypted DNS over HTTPS (DoH) messages. This improves privacy of DNS operations by not allowing any one server entity to be aware of both the client IP address and the content of DNS queries and answers. This experimental protocol has been developed outside the IETF and is published here to guide implementation, ensure interoperability among implementations, and enable wide-scale experimentation.