Recursive DNS resolver exposed exclusively over HTTPS (RFC 8484). Backend: local BIND with DNSSEC validation. No public UDP/53.
| Method | Path | Purpose |
|---|---|---|
| GET/POST | /doh/dns-query | RFC 8484 wire format (application/dns-message). GET ?dns=<base64url> or POST body. |
| GET | /doh/resolve?name=<name>&type=<A|AAAA|MX|TXT|CNAME|NS|CAA> | JSON response, Google DoH JSON API compatible. |
| GET | /doh/status | Service health + capability discovery (JSON). |
# JSON (human/tool friendly) curl "https://scighera.com/doh/resolve?name=aikb.scighera.com&type=A" # Wire format (real DoH clients) doh-client --url https://scighera.com/doh/dns-query example.com A