https://blog.dundns.eu/ Recent content on dúndns Hugo en-us Sat, 15 Aug 2026 09:30:00 +0000 https://blog.dundns.eu/posts/how-dns-tells-a-browser-to-use-http3/ Sat, 15 Aug 2026 09:30:00 +0000 https://blog.dundns.eu/posts/how-dns-tells-a-browser-to-use-http3/ <p>A traditional DNS lookup gives a browser an IP address and little else. It does not say which versions of HTTP the server speaks, whether another hostname or port would work better, or whether the browser can connect over QUIC instead of TCP. The browser has to open a connection before the web server can tell it any of that.</p> https://blog.dundns.eu/posts/ddr-encrypted-dns-discovery/ Tue, 28 Jul 2026 09:30:00 +0000 https://blog.dundns.eu/posts/ddr-encrypted-dns-discovery/ <p>A device is normally configured with a single IP address for its DNS resolver. That address reaches the resolver over plain, unencrypted DNS, which is all a bare IP address can describe. Encrypted DNS requires more: a hostname to check the certificate against, a port, and a protocol. None of that fits in the settings box, and none of it can be worked out from the address already sitting there.</p> https://blog.dundns.eu/posts/doh-dot-doq-odoh-explained/ Sun, 26 Jul 2026 09:30:00 +0000 https://blog.dundns.eu/posts/doh-dot-doq-odoh-explained/ <p>Every time you open a website, your device first asks a DNS resolver where to find it. Without encryption that question travels in the clear, readable by your internet provider, by the café Wi-Fi, and by everyone else handling the traffic along the way. Taken together, those questions are a running list of every site you visit.</p>