DoH encrypts DNS queries inside HTTPS on port 443 — preventing ISP surveillance and DNS manipulation. Used by browsers (Firefox, Chrome) and OS-level resolvers.
DoH provides DNS query privacy. DoT (DNS over TLS, port 853) is an alternative. Both prevent ISP-level DNS snooping. Corporate environments may block DoH to maintain DNS visibility.