DNS over TLS · Cloudflare 1.1.1.1 docs
developers.cloudflare.com › dns-over-tlsDNS stub resolver establishes a TCP connection with cloudflare-dns.com:853. DNS stub resolver initiates a TLS handshake. In the TLS handshake, cloudflare-dns.com presents its TLS certificate. Once the TLS connection is established, the DNS stub resolver can send DNS over an encrypted connection, preventing eavesdropping and tampering.
DNS over TLS · Cloudflare for Teams docs
developers.cloudflare.com › cloudflare-oneDNS over TLS. By default, DNS is sent over a plaintext connection. DNS over TLS (DoT) is a standard for encrypting DNS queries to keep them secure and private. DoT uses the same security protocol, TLS, that HTTPS websites use to encrypt and authenticate communications. Cloudflare supports DoT on standard port 853 and is compliant with RFC7858.