Skip to content

DNS-over-TLS

DNS-over-TLS (DoT) is a security protocol that encrypts and secures your DNS queries across all devices.

Why use DNS-over-TLS?

  • Encrypts DNS traffic using TLS (port 853).
  • Prevents eavesdropping and DNS spoofing.
  • System-wide protection (covers all apps).
  • Works natively on many platforms.

DoT Endpoint

  • Hostname: dns.mininxd.web.id
  • Port: 853 (default for DoT)
  • Protocol: TLS

Android Setup

  1. Go to Settings > Network & Internet > Private DNS.
  2. Choose Private DNS provider hostname.
  3. Enter: dns.mininxd.web.id
  4. Tap Save and wait a moment for it to connect.

iOS Setup

unfortunately iOS does not natively support DoT. Use third-party apps like:

  • DNSCloak (App Store)
  • NextDNS

Linux Setup (systemd-resolved)

bash
sudo nano /etc/systemd/resolved.conf

Update the config:

bash
[Resolve]
DNS=dns.mininxd.web.id
FallbackDNS=1.1.1.1
DNSOverTLS=systemd-resolved

Then restart :

bash
sudo systemctl restart systemd-resolved