Firefox provides an optional resolver mechanism using a dedicated DNS-over-HTTPS server(DoH) allows DNS to be resolved with enhanced privacy, securetransfers and improved performance. This page describes Firefox configuration settings related to DoH in detail, and offers some explanation of internal operations of the implementation.
DNSMozilla operates a Trusted Recursive Resolver program, whose requirements are documented [[Security/DOH-resolver-policy|here]]. All TRRs offered by Firefox conform to the requirements described in the policy. For more information, we've created [https://support.mozilla.org/en-US/kb/firefox-dns-over-HTTPS (DOH) allows DNS resolves with enhanced privacyhttps documentation about DoH and our plans for deployment]. We also have an [https://support.mozilla.org/en-US/kb/dns-over-https-doh-faqs FAQ], securetransfers and improved performanceinstructions for [https://support.mozilla.org/en-US/kb/configuring-networks-disable-dns-over-https network operators who wish to disable DoH on their networks].
== DNS-over-HTTPS Settings in Firefox ==
* Initial ticket: https://bugzilla.mozilla.org/show_bug.cgi?id=1434852
* The DNS-over-HTTPS spec: https://tools.ietf.org/html/rfc8484
* https://support.mozilla.org/en-US/kb/firefox-dns-over-https
* https://support.mozilla.org/en-US/kb/configuring-networks-disable-dns-over-https
== Acknowledgements ==
* [https://daniel.haxx.se/ Daniel Stenberg] wrote the initial implementation of TRR in Firefox
* [https://www.ducksong.com/ Patrick McManus] edited the RFC and reviewed the TRR code
