From: David Sardari <d@duxsco.de>
Date: Sun, 4 Aug 2024 11:35:06 +0000 (+0200)
Subject: doh-url.md: point out DOH server IP pinning
X-Git-Tag: curl-8_10_0~405
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=cb829f994d12e8b02d3e20243f1a8e873d8f74bc;p=thirdparty%2Fcurl.git

doh-url.md: point out DOH server IP pinning

Closes #14377
Signed-off-by: David Sardari <d@duxsco.de>
---

diff --git a/docs/cmdline-opts/doh-url.md b/docs/cmdline-opts/doh-url.md
index 23754cac19..0f745af3b7 100644
--- a/docs/cmdline-opts/doh-url.md
+++ b/docs/cmdline-opts/doh-url.md
@@ -11,6 +11,7 @@ See-also:
   - doh-insecure
 Example:
   - --doh-url https://doh.example $URL
+  - --doh-url https://doh.example --resolve doh.example:443:192.0.2.1 $URL
 ---
 
 # `--doh-url`
@@ -23,5 +24,7 @@ name lookups take place over SSL. However, the certificate verification
 settings are not inherited but are controlled separately via --doh-insecure
 and --doh-cert-status.
 
+By default, DoH is bypassed when initially looking up DNS records of the DoH server. You can specify the IP address(es) of the DoH server with --resolve to avoid this.
+
 This option is unset if an empty string "" is used as the URL.
 (Added in 7.85.0)