Editing Domain Name System (section)

===DNS over Tor===
DNS may be run over [[virtual private network]]s (VPNs) and [[tunneling protocol]]s. The privacy gains of Oblivious DNS can be garnered through the use of the preexisting [[Tor (network)|Tor]] network of ingress and egress nodes, paired with the transport-layer encryption provided by TLS.<ref>{{cite web |last1=Muffett |first1=Alec |title="No Port 53, Who Dis?" A Year of DNS over HTTPS over Tor |url=https://www.ndss-symposium.org/wp-content/uploads/dnspriv21-03-paper.pdf |archive-url=https://web.archive.org/web/20210321110839/https://www.ndss-symposium.org/wp-content/uploads/dnspriv21-03-paper.pdf |archive-date=2021-03-21 |url-status=live |publisher=Network and Distributed System Security Symposium |date=February 2021 |quote=DNS over HTTPS (DoH) obviates many but not all of the risks, and its transport protocol (i.e. HTTPS) raises concerns of privacy due to (e.g.) 'cookies.' The Tor Network exists to provide TCP circuits with some freedom from tracking, surveillance, and blocking. Thus: In combination with Tor, DoH, and the principle of "Don't Do That, Then" (DDTT) to mitigate request fingerprinting, I describe DNS over HTTPS over Tor (DoHoT).}}</ref>