DoH
acronymnetworkingprivacysecurity
Stands for: DNS over HTTPS
DNS queries sent inside HTTPS, indistinguishable from ordinary web traffic.
DNS over HTTPS wraps lookups in an HTTPS session to a resolver, so they are encrypted and travel on port 443 among everything else. That defeats passive observation of what a client is resolving, and it also defeats a network's own DNS policy - a browser using its own DoH resolver never asks the resolver the network configured, so filtering there sees nothing and reports success on the queries it did receive.
DoH is the clearest case in modern networking of a privacy improvement and a control loss being the same change. For a person on a hostile network it removes an observer; for an operator responsible for a network it removes the enforcement point, because the queries no longer arrive. Both descriptions are accurate, and which one matters depends entirely on whose network it is. Enforcing a resolver in the presence of DoH is a firewall and policy question rather than a DHCP setting: the alternatives have to be blocked or the clients configured, and neither is free.
Also known as: doh, dns over https