Servers supporting DNS-over-TLS

The following servers are configured to support TLS on port 853 for testing purposes.

Public Test resolver

Server typeHosted byIP addressesHostname for TLS authenticationSPKI pin for TLS authentication (RFC7858)
Public Test Resolvergetdnsapi.net

185.49.141.38

2a04:b900:0:100::38

getdnsapi.netfoxZRnIh9gZpWnl+zEiKa0EJ2rdCGroMWm02gaxSc9S=

 


How to Decode TLS packets in Wireshark

If you want to decode the DNS packets in Wireshark (use 1.12.1 or later) to get support TLSv1.2