Meanwhile, DoT routes encrypted DNS traffic over a TLS tunnel on a dedicated port 853. While DoT offers better network performance in some use-cases, you do lose some flexibility offered by DoH.