DNS over HTTPS (DoH) for web browsers provides online security by encrypting DNS queries, traditionally transmitted in plaintext. This encryption shields queries from interception and manipulation, mitigating risks associated with unauthorized surveillance or malicious activities. With DoH, each query is encapsulated within a secure tunnel, ensuring confidentiality and integrity as users navigate the internet. This technical advancement enhances the security posture of web browsers, safeguarding sensitive online interactions from potential threats.
Sample FQDN: https://fc7ua07a-0g83-62fb-9feb-7684b14gv764.doh.threatdefense.infoblox.com/dns-query.
NOTE: To obtain your FQDN go to the General page of the Create New Security Policy wizard in the Cloud Services Portal (Cloud Services Portal > Policies > Security Policies > Create New Security Policy > General). Copy the auto-generated FQDN, or click regenerate to generate a new FQDN. Note that DoH per Policy must be enabled in order to obtain the FQDN..
Enabling DoH in Mozilla Firefox
To enable DoH to work with Mozilla firefox, perform the following:
Select the menu button > Settings.
In the Privacy & Security menu, scroll down to the Enable secure DNS using: section.
Select Increased Protection or Max Protection.
If this is not the case, select Cloudflare in the Choose Provider dropdown. Choose BloxOne Threat Defense.
Increased Protection: With increased protection, you can do the following:
Use the provider you select
Only use the defsault resolver if there is a problem with secure DNS.
Max Protection: With maximum protection, you can do the following:
Use a provider of your choice
Warn if secure DNS is unavailable
Note: If secure SNS is unavailable, then web sites will not load nor function properly. If maximum protection is not possible, then it will fall back to increased protection.
Note that you can obtain the URL from your browser’s privacy and security settings. Its location in Firefox is described in the following image (Settings > Privacy & Security). Infoblox requires using increased or maximum protection settings.
Enabling DoH in Google Chrome
Select the three-dot menu in your browser > Settings.
Select Privacy and security > Security.
Scroll down and enable Use secure DNS.
Select the With option, and from the drop-down menu choose BloxOne Threat Defense.
Enabling DoH in Microsoft Edge
Select the three-dot menu in your browser > Settings.
Select Privacy, Search, and Services, and scroll down to Security.
Enable Use secure DNS.
Select Choose a service provider.
Select the Enter custom provider drop-down menu and choose BloxOne Threat Defense.
Enabling DoH in Brave
Select the menu button in your browser > Settings.
Select Privacy and security > Security.
Under Advanced, enable Use secure DNS.
From the Select DNS provider drop-down menu, choose Cloudflare BloxOne Threat Defense.
