I have been running BIND9 on my home network, both as an authoritative name server for my local zone, and as a recursive resolver, for more than ten years. ;-)
But for DoH to make sense, the server must be outside of my private network and my ISP's network.
Comments
I have been running BIND9 on my home network, both as an authoritative name server for my local zone, and as a recursive resolver, for more than ten years. ;-)
But for DoH to make sense, the server must be outside of my private network and my ISP's network.
Exactly. You can forward traffic from DoH to TLS upstream servers, or servers sitting in tier-1 networks that are well outside of your ISP.