DoH (DNS over HTTPS)

Also known as: DNS-over-HTTPS

DNS over HTTPS (RFC 8484) carries DNS queries inside HTTPS on TCP/443, making them indistinguishable from ordinary web traffic. For mobile operators DoH bypasses on-path DNS filtering, parental controls and lawful DNS logging when UEs or apps use third-party resolvers, and it changes the threat model for DNS-based malware detection.

Categories: FraudProtocols and StandardsInternet and Routing

DoH in context

Telecom fraud costs operators an estimated $40+ billion per year. Common vectors include International Revenue Share Fraud (IRSF), Wangiri callback scams, SIM box bypass, PBX hacking, subscription fraud and A2P grey routing. Effective defense combines real-time signaling analytics with CDR-side machine learning.

Telecom security is written into standards from 3GPP, GSMA, ETSI, IETF and ITU-T. Understanding which body owns which specification, and how the specs interlock (for example 3GPP TS 33.501 with GSMA FS.34 for 5G SBA security), is essential for both design and audit work.

To place DoH in the wider telecom-security picture, review DoT, SIM Box, Traffic Pumping, SM-SR, DetNet and 3G.

Related terms

Related topic hubs

More from the TelcoSec Glossary

Browse the full TelcoSec Glossary, the Ultimate Guide to Mobile Network Security, or the P1 Arsenal of telecom-security tools.