(nice explanation: https://blog.cloudflare.com/dns-encryption-explained/ - TL;DR- port tcp/853)

Traditionally for DNS over udp/53 we could use dig to investigate resolution.

I would like to investigate not only resolution, but also quality of encryption layer of connection (i.e. certificate used etc).

Using what tool/tools/command would you recommend investigation of Encrypted DNS resolution (DoT , DoH), including typical dig staff and used encryption certificates? (is there sth better then just combination with wireshark or openssl ?)

  • What operating system are you using for this?
    – Jeff Schaller
    Mar 12, 2021 at 11:24

1 Answer 1


You may want to have a look at dog. dog is a command-line DNS client.

From the README:

Protocol options

-U, --udp                Use the DNS protocol over UDP
-T, --tcp                Use the DNS protocol over TCP
-S, --tls                Use the DNS-over-TLS protocol
-H, --https              Use the DNS-over-HTTPS protocol

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.