DoT
acronymnetworkingprivacy
Stands for: DNS over TLS
DNS queries carried inside TLS on their own port, 853.
DNS over TLS encrypts the same queries as DoH but keeps them on a dedicated port, which makes them visible as DNS to a network that looks - and therefore blockable, or permitted deliberately, as a matter of policy rather than of parsing.
The practical difference between DoT and DoH is not cryptographic; both protect the query in transit. It is whether the traffic announces what it is. DoT on port 853 can be allowed, denied or redirected by an operator who has an opinion; DoH on 443 can only be managed by blocking known resolver endpoints or by controlling the client. That is why enterprises that permit encrypted DNS at all tend to prefer DoT, and why DoH became the default in consumer software.
Also known as: dot, dns over tls