Traditional DNS queries travel in plaintext. Anyone on your network can see what domains you look up.
DNS over HTTPS (DoH) wraps DNS queries in HTTPS connections to port . Your queries look like regular web traffic.
DNS over TLS (DoT) encrypts DNS using TLS on port . It's easier to filter than DoH but clearly identifies itself as DNS.
Both prevent eavesdropping on your queries. Major browsers and operating systems now support these protocols.