DNS over HTTPS (DoH): Security Risks for Enterprise Networks

This article explains DNS over HTTPS (DoH), how it encrypts DNS queries and can bypass operating-system level DNS controls, and outlines the operational, regulatory, and security risks for enterprises—including evasion of DNS firewalls, auditing gaps, split-DNS leakage, and the potential for malware (e.g., Godlua) to abuse DoH; it recommends blocking or monitoring known DoH resolvers (for example via threat feeds) as a mitigation.