2.2.4.2.3 DNS_RPC_ENCRYPTION_CONFIG

The DNS_RPC_ENCRYPTION_CONFIG structure specifies the configuration for DNS over HTTPS (DoH) encryption protocol settings on the DNS server.

typedef struct _DnsEncryptionConfig_{
     DWORD dwDnsEncryptionType;
     LPWSTR pwszUriTemplate;
 } DNS_RPC_ENCRYPTION_CONFIG, *PDNS_RPC_ENCRYPTION_CONFIG;

dwDnsEncryptionType: This value indicates the type of encryption protocol configured on the DNS server. This MUST be set to one of the values defined in DNS_ENCRYPTION_TYPE (section 2.2.4.1.3).

pwszUriTemplate: If dwDnsEncryptionType is set to DnsEncryptionDoH, this field MUST contain a null-terminated Unicode string containing one or more URI Template(s). Maximum length of this field MUST be 1190 characters. This field MUST support up to three URI templates separated by the "|" character. Each URI template MUST conform to [RFC8484] and [RFC6570] and MUST use the HTTPS scheme. For example:

 https://dns.contoso.com:443/dns-query|https://backup.contoso.com:443/dns-query

Otherwise, this field SHOULD be set to NULL.