From: Petr Špaček <petr.spacek@nic.cz>
Date: Mon, 7 Sep 2020 07:14:51 +0000 (+0200)
Subject: doc: DoH without TLS or over HTTP 1 is deprecated
X-Git-Tag: v5.1.3~2^2~1
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=414d77d6466993856bca0f3661505da1d1affdf3;p=thirdparty%2Fknot-resolver.git

doc: DoH without TLS or over HTTP 1 is deprecated
---

diff --git a/doc/upgrading.rst b/doc/upgrading.rst
index f00435acc..e243bf912 100644
--- a/doc/upgrading.rst
+++ b/doc/upgrading.rst
@@ -29,7 +29,9 @@ Users
   the human readable output. For example API call ``tojson(cache.stats())\n`` will return JSON string
   with ``cache.stats()`` results represented as dictionary.
   Function ``tojson()`` is available in all resolver versions >= 1.0.0.
-
+* DoH served with http module :ref:`DNS-over-HTTP (DoH) <mod-http-doh>` will be marked as legacy
+  and won't receive any more bugfixes. A more reliable and scalable DoH module will be available
+  instead. The new DoH module will only support HTTP/2 over TLS.
 
 5.0 to 5.1
 ==========