3r3-31. 3r3117.  
3r3117.  
DNS Over TLS & Over HTTPS (Further DOT & DOH) - Perhaps those are the technologies that dramatically increase privacy and security on the Internet. 3r350. There is also Encrypted SNI, but you need DOH and DOT [/i] to use it. 3r3117.  
3r3117.  

I draw your attention, the application itself is very UserFriendly, even without a deep knowledge of technology, it is strongly recommended that you familiarize yourself with it.

3r3117.  
Quick Reference: 3r350. DNS is a system for obtaining an IP address, a fundamental part of the Internet, which is used every time when web browsing. By opening this or that resource, you tell your service provider where you have come, even if you change DNS to another (???.8 from Google for example) - this does not help you, due to the lack of encryption in the protocol, which allows you to replace and traffic redirection is not a target server (actually an MITM attack). 3r3117.  
Google Public DNS has quietly enabled support for DNS over TLS 3r3-3110. 3r366.  
3r3633.
We meet the service from Cloudflare at addresses ???.1 and ???.? or “the public DNS regiment has arrived!” 3r3-3110. 3r366.  
3r3117.  
And it would seem that happiness is near, two large companies have decided to implement new protocols and is about to get support to end users. (Especially in the case of Chrome) 3r3r117.  
3r3117.  
But for some unknown reason, DOT & DOH support is now available only in the “nightly” builds of Firefox, not to mention the Android & iOS system level. 3r3117.  
3r3117.  
However, thanks to CloudFlare, who decided to take advantage of the slowness of Google, and released an application for
iOS 3r33110. &
Android 3r3117.  
3r3117.  
The application is very simple, in the case of iOS, work is done through the installation of the VPN profile 3r3117.  
Not to be confused with real VPN! After the profile is installed, the VPN will actually be set to itself (at ???.1) and DNS requests will be sent to CloudFlare via DOT & DOH, while the traffic will follow the usual route. 3r3117.  
3r3117.  
3r395. 3r3117.  
3r3117.  
What is nice, the application has the ability to configure DNS Over TLS or DNS Over HTTPS. the default is used by default. 3r3117.  
3r3117.  
3r3104. 3r3105.
3r3117.  
I note once again, the appearance of the VPN icon does not mean the use of “VPN” in the usual sense of the word, you can make sure by logging into any IP identifier, for example, 3r3109. 2ip.ru
3r3117.  
3r3117.  
And yet, in the case of changing the DNS in the network settings - when switching from WiFi to WiFi, you need to change the settings every time, not to mention the DNS for the carrier network, it is sometimes impossible to edit this parameter. 3r3117.  
3r3117.  
In the case of the application - for any connections will be automatically used DOH /DOT from CloudFlare.
3r3122. ! function (e) {function t (t, n) {if (! (n in e)) {for (var r, a = e.document, i = a.scripts, o = i.length; o-- ;) if (-1! == i[o].src.indexOf (t)) {r = i[o]; break} if (! r) {r = a.createElement ("script"), r.type = "text /jаvascript", r.async =! ? r.defer =! ? r.src = t, r.charset = "UTF-8"; var d = function () {var e = a.getElementsByTagName ("script")[0]; e.parentNode.insertBefore (r, e)}; "[object Opera]" == e.opera? a.addEventListener? a.addEventListener ("DOMContentLoaded", d,! 1): e.attachEvent ("onload", d ): d ()}}} t ("//mediator.mail.ru/script/2820404/"""_mediator") () ();