What is DNS over HTTPS?

DoH wraps DNS queries in normal HTTPS traffic to a resolver you configure (or that your browser or OS chooses). On many networks it hides DNS query names from casual on-path observers, though the resolver you use still sees every question you ask.

Can a website see which DNS servers my PC uses?

Not through standard web APIs. Your operating system and router maintain resolver settings; that list is not exposed to arbitrary pages for privacy and security reasons. A page can still trigger lookups to a public resolver (as our tool does) and show what that resolver returns.

Why might two DNS checkers disagree?

Different resolvers, caching (TTL), geographic routing, and whether the query used IPv4-only paths versus dual-stack can all change answers. Authoritative DNS changes also propagate gradually.

What is the difference between A and AAAA?

An A record holds an IPv4 address. An AAAA record holds an IPv6 address. Many services publish both so clients can use whichever protocol the network supports.

April 22, 2026 · 9 min read

What Is DNS Resolution? A Records, AAAA, and DNS over HTTPS (DoH)

Q: What is DNS resolution?

It is the process of turning a hostname (like example.com) into the IP addresses clients use to open a TCP connection. Common record types include A (IPv4) and AAAA (IPv6).

How hostnames become IP addresses, why A and AAAA matter, what DNS over HTTPS changes on the wire, and what a normal website can (and cannot) discover about your DNS settings.

When you type a hostname or click a link, your software needs an IP address before it can open a connection. DNS (the Domain Name System) is the distributed directory that answers “what addresses belong to this name?” That answer path — from your stub resolver to recursive resolvers and sometimes authoritative nameservers — is what people mean by DNS resolution.

Records you see most often: A and AAAA

An A record maps a name to an IPv4 address (dotted decimal).
An AAAA record maps a name to an IPv6 address (hex groups with colons).

A hostname might have only A, only AAAA, both, or neither (for example if it uses only a CDN alias chain). Our What Is My DNS page asks a public resolver for A and AAAA and shows whatever that resolver returns, with TTL (time to live) hints so you know how long answers may be cached.

Traditional DNS vs DNS over HTTPS (DoH)

Classic DNS often uses UDP (and sometimes TCP) on port 53 between your device and a resolver. On untrusted networks, those queries can be observed or modified by middleboxes unless you add encryption (for example DNS over TLS on another port, or DoH).

DoH sends the same logical questions inside HTTPS to an HTTPS endpoint (for example a well-known public resolver). Benefits include:

Encryption of the query to that resolver on many network paths.
Shared fate with web traffic — it looks like ordinary HTTPS to many filters.

Tradeoffs include centralization toward whichever resolver you use (it sees your queries) and the fact that local policy DNS (Pi-hole, split-horizon corporate DNS) may not apply if the browser bypasses the OS stub resolver for DoH.

What this site’s DNS tool does — and does not — claim

The browser cannot read your full OS or router “DNS server” list and show it on a page. So we do not pretend to print “your ISP’s DNS.” Instead, the tool runs A and AAAA lookups against Cloudflare’s public DNS over HTTPS endpoint and labels that clearly. That tells you what that resolver returns — useful for quick checks and for comparing with dig or your system resolver offline.

For authoritative debugging (delegation, NS glue, long CNAME chains), command-line tools and your IT stack still matter; this page is a fast, honest browser-side slice of the problem, not a replacement for a full resolver trace.