Glossary · ENCheck a domain

HTTPS and SVCB records

HTTPS and SVCB are DNS record types that can give a browser or other program information about how to connect to a service. An HTTPS record is the version intended for HTTP and HTTPS websites. It can publish connection settings or alternative destinations before a browser connects, while ordinary A and AAAA records provide IP addresses.

What information can an HTTPS record provide?

An HTTPS record can identify a target host and parameters such as supported communication protocols or a port (a numbered network connection point). A browser that supports the record can use the information when setting up a connection. Other clients that do not implement HTTPS/SVCB records may ignore them and use ordinary address records instead, so sites commonly need compatible fallback DNS data.

For example, a domain may publish an HTTPS record that tells supporting browsers to connect to a particular network destination using HTTP/2. The browser still validates the TLS certificate for the website's original host name. The record does not itself contain the certificate, prove that the endpoint is trustworthy, or replace HTTPS configuration.

Is an HTTPS DNS record the same as an HTTPS website?

No. A website can use HTTPS without publishing an HTTPS DNS record. The DNS record is optional connection guidance; HTTPS is the protected web protocol used for the actual connection. SVCB is a related, more general record type that can describe connection information for other services.

Related terms