Understand who can still observe queries
05HTTPS hides content from some network observers while the DoH service still receives the DNS question.
Related RFCs and changes
“Updates” changes part of an earlier RFC. “Obsoletes” replaces it. This list shows selected related documents.
DIAGRAM§ 8 ↗
RFC 8484 · § 8EXAMPLE
3 / 3
03
Timing and size can still expose patterns to an observer.
Timing and size can still expose patterns to an observer.
Protocol participantThreat or exceptionProtocol controlSimplified drawings · precise section references
Read the updated RFC section ↗
Message size, timing, IP addresses, and resolver visibility remain privacy considerations.
- Message size, timing, IP addresses, and resolver visibility remain privacy considerations.
- HTTP features such as cookies can add correlation; encryption does not eliminate all linkability.
The drawing is a simplified worked example. Follow the linked RFC and its updates for implementation requirements.
Read the RFC section ↗Diagrams simplify the RFC. Read the linked sections for complete requirements.
Privacy