# How DNS-over-HTTPS Is Changing Network Security

Page: https://stenobird.com/podcast/networking-tech-with-fexingo-internet-infrastructure-routing-and-network-engineering-7871928/how-dns-over-https-is-changing-network-security
Text version: https://stenobird.com/podcast/networking-tech-with-fexingo-internet-infrastructure-routing-and-network-engineering-7871928/how-dns-over-https-is-changing-network-security.md
Podcast: [Networking Tech with Fexingo: Internet Infrastructure, Routing, and Network Engineering](https://stenobird.com/podcast/networking-tech-with-fexingo-internet-infrastructure-routing-and-network-engineering-7871928)
Published: 2026-06-21T09:56:22+00:00
Episode link: https://audio.fexingo.com/business/networking-tech/episode-0064.mp3
Audio file: https://audio.fexingo.com/business/networking-tech/episode-0064.mp3
Processing state: not_requested
JSON: https://stenobird.com/v1/public/podcasts/networking-tech-with-fexingo-internet-infrastructure-routing-and-network-engineering-7871928/episodes/how-dns-over-https-is-changing-network-security
Duration seconds: 441

## Resource

DNS-over-HTTPS, or DoH, encrypts DNS queries to prevent eavesdropping and manipulation. But it also shifts DNS resolution from the network to the client, breaking traditional security monitoring. Lucas and Luna explore how DoH works, why browsers like Chrome and Firefox adopted it, and what it means for network engineers trying to enforce filtering or detect malware. They focus on the real-world tension between user privacy and enterprise visibility, using examples like Cisco Umbrella and Cloudflare's 1.1.1.1. With over 30% of DNS queries now encrypted, DoH is reshaping network design. The hosts discuss how to adapt: using DNS-over-TLS on the network edge, enabling policy-based DoH, and monitoring encrypted traffic via ECH. This episode gives network engineers a practical framework for navigating the DoH landscape in 2026. #DNSOverHTTPS #DNSSEC #EncryptedDNS #NetworkSecurity #Privacy #Cloudflare #CiscoUmbrella #EncryptedClientHello #TechPodcast #InternetInfrastructure #Routing #NetworkEngineering #Cybersecurity #Browsers #Firefox #Chrome #FexingoBusiness #BusinessPodcast Keep every episode free: buymeacoffee.com/fexingo

## Actions

- request_transcript: `POST https://stenobird.com/v1/public/podcasts/networking-tech-with-fexingo-internet-infrastructure-routing-and-network-engineering-7871928/episodes/how-dns-over-https-is-changing-network-security/transcription-requests` — Idempotently request low-priority transcript generation for this episode.
- read_markdown: `GET https://stenobird.com/podcast/networking-tech-with-fexingo-internet-infrastructure-routing-and-network-engineering-7871928/how-dns-over-https-is-changing-network-security.md` — Read the agent-friendly Markdown representation of this episode resource.

A page view does not enqueue transcription. Agents should invoke `request_transcript` explicitly when they need this episode processed.

## Transcript

Full transcripts are not published on public pages unless there is a clear rights basis.