V VPN Glossaryvpnglossary.com
163 entries · 2026 ed.
№ 101 / 163 O Privacy

Oblivious DNS over HTTPS (ODoH)

Oblivious DoH is an experimental protocol that sends encrypted DNS queries via a proxy, so no single server sees both who you are and what you looked up.

§ 01

Definition

Standard DNS over HTTPS hides lookups from your ISP but the DoH resolver still sees your IP address and every name you query. ODoH, published as experimental RFC 9230 in 2022, splits that knowledge between two parties.

§ 02

How it works

Your device encrypts the query with the target resolver's public key and sends it to a separate proxy. The proxy sees your IP but not the query; the resolver sees the query but only the proxy's IP. The idea mirrors Apple's iCloud Private Relay and multi-hop VPNs.

§ 03

Why it matters

ODoH shows the privacy principle behind multi-hop setups: separate identity from activity. Support is still limited, so for most people a trustworthy VPN resolver or a reputable DoH provider is the practical choice.

/ Sources

  1. RFC 9230: Oblivious DNS over HTTPS