From cb829f994d12e8b02d3e20243f1a8e873d8f74bc Mon Sep 17 00:00:00 2001 From: David Sardari Date: Sun, 4 Aug 2024 13:35:06 +0200 Subject: [PATCH] doh-url.md: point out DOH server IP pinning Closes #14377 Signed-off-by: David Sardari --- docs/cmdline-opts/doh-url.md | 3 +++ 1 file changed, 3 insertions(+) diff --git a/docs/cmdline-opts/doh-url.md b/docs/cmdline-opts/doh-url.md index 23754cac19..0f745af3b7 100644 --- a/docs/cmdline-opts/doh-url.md +++ b/docs/cmdline-opts/doh-url.md @@ -11,6 +11,7 @@ See-also: - doh-insecure Example: - --doh-url https://doh.example $URL + - --doh-url https://doh.example --resolve doh.example:443:192.0.2.1 $URL --- # `--doh-url` @@ -23,5 +24,7 @@ name lookups take place over SSL. However, the certificate verification settings are not inherited but are controlled separately via --doh-insecure and --doh-cert-status. +By default, DoH is bypassed when initially looking up DNS records of the DoH server. You can specify the IP address(es) of the DoH server with --resolve to avoid this. + This option is unset if an empty string "" is used as the URL. (Added in 7.85.0)