Skip to content

[1.1.1.1] Add Oblivious DNS over HTTPS #17906

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
merged 8 commits into from
Nov 19, 2024
Merged

[1.1.1.1] Add Oblivious DNS over HTTPS #17906

Changes from 1 commit
Commits
Show all changes
8 commits
Select commit Hold shift + click to select a range
564bb4e
Create placeholder page, reorder, and adjust Encryption index
RebeccaTamachiro Oct 31, 2024
6b35cad
Initial outline and fill in intro
RebeccaTamachiro Nov 5, 2024
3aebd71
Fill in defined outline for a first complete version
RebeccaTamachiro Nov 5, 2024
d1a5e57
Initial review: experimental status, remove OHTTP ref, and replace Ru…
RebeccaTamachiro Nov 12, 2024
1b892a5
Edit RFC callout, improve how it works section, and fix client link
RebeccaTamachiro Nov 13, 2024
8a4973e
Replace OHTTP blog with HPKE blog
RebeccaTamachiro Nov 14, 2024
d2f34aa
Remove information already covered in the blog post
RebeccaTamachiro Nov 18, 2024
e852008
Add mention to iCloud Private Relay
RebeccaTamachiro Nov 18, 2024
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
8 changes: 5 additions & 3 deletions src/content/docs/1.1.1.1/encryption/oblivious-dns-over-https.mdx
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -7,9 +7,11 @@ sidebar:
label: Oblivious DoH
---

As announced on [our blog](https://blog.cloudflare.com/oblivious-dns/), since late 2020, Cloudflare 1.1.1.1 supports Oblivious DNS over HTTPS (ODoH) ([RFC 9230](https://www.rfc-editor.org/rfc/rfc9230.html)).
As announced on [our blog](https://blog.cloudflare.com/oblivious-dns/), since late 2020, Cloudflare 1.1.1.1 supports Oblivious DNS over HTTPS (ODoH).

ODoH is a protocol for performing remote Domain Name System (DNS) resolution based on the Oblivious HTTP protocol (OHTTP) ([RFC 9458](https://www.rfc-editor.org/rfc/rfc9458.html)).
:::caution
Although ODoH is defined in [RFC 9230](https://www.rfc-editor.org/rfc/rfc9230.html), it is experimental. 1.1.1.1 supports ODoH as [described bellow](#cloudflare-and-third-party-products), but this protocol is not endorsed by IETF nor by Cloudflare.
:::

## How ODoH works

Expand All @@ -31,7 +33,7 @@ Cloudflare 1.1.1.1 supports ODoH by acting as a target that can be reached at `o

At launch, a few proxy partners included [PCCW](https://www.pccw.com/), [SURF](https://www.surf.nl/), and [Equinix](https://www.equinix.com/).
Copy link
Contributor

@Oxyjun Oxyjun Nov 14, 2024

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Just for my own understanding: are they still included? "At launch" + "included" (past tense) made me a bit unsure if we're saying we still include them or not 😄

Copy link

@vendemiat vendemiat Nov 14, 2024

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

needs rewording.


Finally, open source test clients are available in [Rust](https://github.com/cloudflare/odoh-client-rs) or [Go](https://github.com/cloudflare/odoh-client-go).
Finally, open source test clients are available in [Rust](https://github.com/DNSCrypt/dnscrypt-resolvers/blob/master/v3/odoh-relays.md) or [Go](https://github.com/cloudflare/odoh-client-go).

## Related resources

Expand Down
Loading