Servers supporting DNS-over-TLS

The following servers are configured to support TLS on port 1021 and STARTTLS on port 53 for testing purposes.

Open resolver

Authoritative servers [currently offline]

Authoritative test server hosted by Verisign Labs:

Server typeHosted byIP addressesServer key


AuthoritativeVerisign Labs173.255.254.151nsd.key


How to Decode TLS packets in Wireshark

If you want to decode the DNS packets in Wireshark (use 1.12.1 or later) to get support TLSv1.2