Google Likely Adding DNS-Over-HTTPS In Android 13

XDA-Developers reports that a recent code change in the Android Open Source Projects suggests Google will be adding DNS-Over-HTTPS to Android 13.

DNS-Over-HTTPS is somewhat better at preserving privacy and more resistant to being blocked,

While DoT and DoH essentially do the same thing, DoT uses TLS (also known as SSL) to encrypt DNS traffic, which is the same protocol that HTTPS websites use to encrypt and authenticate communications. DoH, on the other hand, uses HTTP or HTTP/2 protocols to send queries and responses instead of directly over UDP. Both standards also use different ports, which gives DoH a slight advantage from a privacy perspective.

As this Cloudflare post notes, DoT uses a dedicated port for DNS traffic, and anyone with network visibility can see the traffic, even though the requests and responses themselves are encrypted. DoH, however, uses port 443 — the same port that all other HTTP traffic uses. That means all DNS traffic blends in with other HTTPS traffic. This makes monitoring and blocking DoH queries a whole lot more complex, and network administrators can’t block DoH traffic without blocking other HTTPS traffic as well.

Leave a Reply