DNS over HTTPS

Encrypted DNS over HTTPS

Endpoint

https://website-xnqsyvgcprzaash17upkc5cd.DE-FRA-COG.ledns.infra.rqsco.cloud/dns-query

This is the URI for both HTTP/2 and HTTP/3. HTTP/3 is negotiated by the client; do not enter an h3:// URI.

Browsers

Firefox, Chromium, Chrome and Edge expose secure-DNS settings, but menu names and policies vary by release and administrator configuration. Choose a custom provider and enter the endpoint above. Browser-only configuration affects that browser, not every application on the device.

See the Windows guide or platform-specific documentation for system-wide configuration.

Command-line verification

A recent Knot DNS kdig build with HTTPS support can query the endpoint:

kdig +https @ledns.eu example.com A

A successful DNS answer proves the query completed; inspect verbose client output or a packet capture if you must prove which transport was negotiated.

The previous JSON-style curl example was removed because the current endpoint expects RFC 8484 DNS wire format and rejected that request.

DoH is not invisible

DoH encrypts the DNS question in transit, but networks can still block known resolver addresses, apply endpoint policy or restrict browsers. It should be described as harder to inspect casually, not impossible to identify or block.