Intercepting Unencrypted Domain Name Requests
During normal web browsing, the network operator sees every request sent to the DNS server before a secure HTTPS connection is established. The provider's filtering equipment can forcibly return a fake IP address for a blocked site or collect a complete log of visited resources for targeted advertising.
Setting Up Encrypted Name Resolution
- Enable the "Secure DNS" option in advanced browser settings using the DNS-over-HTTPS protocol
- Configure system encrypted DNS in your operating system settings specifying Cloudflare or Quad9 servers
- Enter DoT server addresses in your home router's network interface settings
- Block direct outgoing traffic on unsecured UDP port 53 at the network gateway