{"id":21075,"date":"2019-10-17T04:00:00","date_gmt":"2019-10-17T04:00:00","guid":{"rendered":"https:\/\/www.lightspeedsystems.com\/blog\/what-schools-need-to-know-about-web-filtering\/"},"modified":"2025-03-20T14:59:36","modified_gmt":"2025-03-20T18:59:36","slug":"what-schools-need-to-know-about-web-filtering","status":"publish","type":"post","link":"https:\/\/www.lightspeedsystems.com\/en_uk\/blog\/what-schools-need-to-know-about-web-filtering\/","title":{"rendered":"DNS over HTTPS \u2013 What Schools Need to Know about Web Filtering with DoH"},"content":{"rendered":"
\n

\n
\n
\nSchool web filtering evolves with DoH
\n<\/span>
\n<\/span>
\n<\/h2>\n

Recently, Mozilla announced<\/a> its plans to implement the DNS-over-HTTPS (DoH) protocol by default in the Firefox browser starting in late September. Soon after, Google announced<\/a> its intention to do the same for the Chrome browser. The implications for web filtering and schools could be big. Learn what DoH means for schools that need to filter traffic and protect students.<\/p>\n

\n
\n
\nWhat is DOH?
\n<\/span>
\n<\/span>
\n<\/h3>\n

DoH stands for DNS Over HTTPS. DNS stands for Domain Name System; it\u2019s the system for matching the domain name of a site (like www.something.com) to its IP addresses that makes it easy to browse the web and get to your favorite sites. Historically all of that has happened via an unencrypted DNS connection. As the name DNS over HTTPs implies, DoH takes DNS and shifts it to a secure, encrypted HTTPs connection.<\/p>\n

\n
\n
\nWhy DOH?
\n<\/span>
\n<\/span>
\n<\/h3>\n

Mozilla and Google are making these changes to bring the security and privacy benefits of HTTPS to DNS traffic. All those warnings about the security risks of public WiFi? With DoH, you\u2019re protected against other WiFi users seeing what websites you visit because your activity would be encrypted. DoH can also add protection against spoofing and pharming attacks and can prevent your network service providers from seeing your web activity.<\/p>\n

\n
\n
\nWhat does DOH mean for schools?
\n<\/span>
\n<\/span>
\n<\/h3>\n

DoH prevents network services from seeing web traffic \u2013 but seeing web traffic is something schools rely on for web filtering and reporting. Much like Google\u2019s move to encrypted search and other services years ago, while this can bring greater privacy and security to many users, it can also have big, negative implications for schools. Schools rely on the ability to see student traffic to provide essential services like filtering, monitoring, and reporting on school-owned devices.<\/p>\n

\n
\n
\nWhen does DOH take effect?
\n<\/span>
\n<\/span>
\n<\/h3>\n

Firefox has already started to gradually shift to DOH. Chrome is expected to start shifting some traffic by the end of the year.<\/p>\n

\n
\n
\nDoes this impact your school?
\n<\/span>
\n<\/span>
\n<\/h3>\n

If you rely on DNS for school web filtering, you may be affected: without proper preparation or solutions, traffic won\u2019t be able to be reliably blocked and your filtering may be ineffective. For our Lightspeed Systems customers, we have you covered.<\/p>\n

\n
\n
\nIs Lightspeed Systems is DoH ready?
\n<\/span>
\n<\/span>
\n<\/h3>\n

If you\u2019re using Lightspeed Filter\u2122, you\u2019ll be ready for DoH because our Smart Agents\u2122 are installed on the device to provide the most granular, decrypted school web filtering; they don\u2019t use DNS.
\nOur Lightspeed Rocket\u2122 (for BYOD and IoT traffic) uses DNS, but we\u2019ve prepared our technology for DNS over HTTPS and the Rocket will block the DoH domains so traffic is forced back to standard DNS where it can be seen, filtered, and reported.
\nInline Rocket Web Filter customers will also be able to filter traffic across DoH.<\/p>\n

\n
\n
\nWhat should users of other web filters do?
\n<\/span>
\n<\/span>
\n<\/h3>\n

If you\u2019re not using Lightspeed Systems solutions, make sure that you will be able to effectively filter all traffic even with these shifts to DoH.<\/p>\n