Annotation

  • Introduction
  • Understanding the Protocol Change
  • Impact on Legacy Systems
  • Pros and Cons
  • Conclusion
  • Frequently Asked Questions
Tech News

Quad9 DNS Ends HTTP/1.1 DoH Support: Complete Guide for 2025

Quad9 discontinues HTTP/1.1 support for DNS-over-HTTPS by December 2025, affecting legacy devices like MikroTik routers while enhancing security for modern systems through updated protocols.

Quad9 DNS service logo with encrypted DNS connection visualization
Tech News2 min read

Introduction

Quad9, the privacy-focused DNS resolver, will discontinue DNS-over-HTTPS (DoH) support using HTTP/1.1 by December 15, 2025. This move modernizes infrastructure while keeping security robust. Most modern systems won't be affected, but legacy equipment may need updates.

Understanding the Protocol Change

The retirement of HTTP/1.1 for DoH is a key step in Quad9's modernization. This older protocol lacks the performance of HTTP/2 and HTTP/3. By focusing on newer standards, Quad9 enhances DNS resolver capabilities and features.

Modern browsers like Chrome, Firefox, and Safari use HTTP/2 or later for DoH, so most users won't notice changes. Updated OSes on Windows, macOS, and Linux have adopted modern protocols for network monitoring and DNS resolution.

Impact on Legacy Systems

Specialized networking equipment, especially some MikroTik routers using HTTP/1.1, may lose Quad9 DoH unless updated. Network admins should prepare by exploring router configuration tools or adjusting DNS settings.

This highlights the need for updated encryption tools. Quad9 will still support traditional DNS and DNS-over-TLS, but DoH will only use HTTP/2 and HTTP/3 after December 2025.

Pros and Cons

Advantages

  • Better performance with HTTP/2 and HTTP/3
  • Enhanced security via updated encryption
  • Improved resource allocation for Quad9
  • Alignment with current browser and OS standards
  • Promotes up-to-date network security practices

Disadvantages

  • Potential disruption for legacy equipment users
  • Configuration changes needed for affected routers
  • Limited impact on outdated infrastructure

Conclusion

Quad9's sunset of HTTP/1.1 DoH is a necessary evolution for encrypted DNS. While some adjustments are needed, it strengthens privacy and performance, making Quad9 a valuable privacy tool. Verify system compatibility before the deadline to ensure uninterrupted service.

Frequently Asked Questions

Will Quad9 DNS still work after December 2025?

Yes, Quad9 will continue operating normally. Only DNS-over-HTTPS using the older HTTP/1.1 protocol will be discontinued. Traditional DNS and DNS-over-TLS will remain available, and DoH will work with HTTP/2 and HTTP/3.

How do I check if my device uses HTTP/1.1 for DoH?

Check your browser's network settings or use developer tools to inspect DNS queries. For routers like MikroTik, review your firmware version and DNS configuration. Most modern systems automatically use HTTP/2 or later.

What is DNS-over-HTTPS (DoH)?

DNS-over-HTTPS is a protocol that encrypts DNS queries using HTTPS, enhancing privacy and security by preventing eavesdropping and manipulation of DNS traffic.

How does HTTP/2 improve DoH performance?

HTTP/2 offers multiplexing, header compression, and server push, reducing latency and improving efficiency for DNS queries compared to HTTP/1.1, leading to faster and more reliable connections.

What are the alternatives to Quad9 for encrypted DNS?

Alternatives include Cloudflare DNS, Google Public DNS, and OpenDNS, which also support encrypted protocols like DoH and DNS-over-TLS for enhanced privacy and security.