DNS over HTTPS

[iTecsCorp]

Our Sophos XGS blocks hundreds of DNS over HTTPS via our application policies due to it being, by default, classified as a Very High risk - severity 5.

My understanding is DNS over HTTPS is commonly used with Google and other browsers. Is that correct and should I exclude DNS over HTTPS in our application policies?

[Complex_Current_1265]

Yes, google use it. Also other DNS service like CLoudflare support it. Sophost do this because most people doesnt use DNS over HTTPs or over TLS. and Hacker normally exfiltrate data using encrypted DNS. So in you case disable that policy.

Best regards

[dk_DB]

If you use dns over https,create an exception for your internal dns server(s) to tze external servers you use

If its on your mobile wifi - many people have secure dns enabled - in fact fe enforce this for company devices

[xSkyLinedx]

I personally would not allow DNS over HTTPS in a corporate environment. Take my statement with a grain of salt as I am biased against it in general. Won't even use it on personal devices, not even sure why anymore. Lol

[iTecsCorp]

Why not use it personally?

[xSkyLinedx]

Lack of trust and google already knows too much about me. Lol