DoH

DoH sends DNS queries inside normal HTTPS traffic, hiding them from network observers. It improves user privacy and blocks tampering, and major browsers support it natively. It is debated in enterprises because it can bypass internal DNS filtering and monitoring controls.