There shall be increased use of DNS-over-HTTPS (DoH) by malware because DoH provides an encrypted channel to the DoH server. DoH adoption is increasing and malware developers are more aware of it as a means to bypass security controls. ISPs and enterprises will deploy DoH defensively on their own DNS infrastructure Why now? DoH is a newer technology, relatively speaking.

Infoblox DNS can put more than 45 million threat indicators to work in real-time within BloxOneTM Threat Defense, which provides advanced DNS security as SaaS-based services from the cloud or as a hybrid on-premises/SaaS solution.