DNS over TLS (DoT)

A protocol for encrypting DNS queries using TLS on a dedicated port (853). Unlike DNS over HTTPS, which uses port 443 and blends with web traffic, DoT operates on its own port, making it easier for network administrators to identify and manage DNS traffic. DoT provides the same privacy benefits as DoH — preventing eavesdropping on DNS queries — but with clearer network policy enforcement capabilities.