Hacker News Reader

DoT is simply DNS-over-TLS (never heard of Distributed TLS).

The article linked by this post explains that Android supported DoT since Android 9, but it was problematic because it required frequent TCP handshakes and TLS handshakes. Plus, it could be easily blocked by middle boxes.

View on HN

Ah, thank you. Then DoT is not really what I meant. Distributed TLS, aka Datagram TLS, aka DLTS, is TLS security mechanisms adapted for use with UDP [1].

[1] https://developer.mozilla.org/en-US/docs/Glossary/DTLS

I think Tmobile is blocking DoT specifically

Dammit, I use T-Mobile.

But they can't easily block DoH, since it looks like regular HTTP/3 traffic on UDP port 443.

Reply on news.ycombinator.com