What is secure DNS and how to configure DoH or DoT to protect against traffic interception?

Standard DNS queries are transmitted unencrypted, which allows malicious actors on the local network or internet service providers to track the sites you visit and redirect requests to phishing resources. Using secure DNS over HTTPS (DoH) or DNS over TLS (DoT) protocols solves this problem.

To configure secure DNS, open the network and security settings in your browser. Find the section responsible for using a secure address resolver. Select the custom provider option and enter the address of a trusted provider that supports encryption.

You can choose verified public operators or use specialized DNS-level threat blocking services. This will provide additional filtering of dangerous domains even before the browser attempts to establish a connection with a malicious site.

Verify that the settings are working correctly using specialized online DNS leak tests. Make sure that queries are actually encrypted and are not transmitted through standard unsecured channels of your current internet service provider.