Analysis of Well-Known DNS over HTTPS Resolvers

Kód výsledku v IS VaVaI

<a href="https://www.isvavai.cz/riv?ss=detail&h=RIV%2F00216305%3A26230%2F23%3APU149368" target="_blank" >RIV/00216305:26230/23:PU149368 - isvavai.cz</a>

Výsledek na webu

<a href="http://dx.doi.org/10.1109/CCWC57344.2023.10099347" target="_blank" >http://dx.doi.org/10.1109/CCWC57344.2023.10099347</a>

DOI - Digital Object Identifier

<a href="http://dx.doi.org/10.1109/CCWC57344.2023.10099347" target="_blank" >10.1109/CCWC57344.2023.10099347</a>

Jazyk výsledku

angličtina

Název v původním jazyce

Analysis of Well-Known DNS over HTTPS Resolvers

Popis výsledku v původním jazyce

DNS over HTTPS (DoH) is one of the protocols adding encryption to DNS and aiming to improve users' privacy. DoH brings more centralization to DNS, leaving the users to pick the default predefined resolver by application or choose custom. Due to the difficulties of DoH resolver discovery, users depend on the publicly available DoH resolver lists. This work studies hundreds of well-known resolvers from comprehensive well-known DoH resolvers list. We provide long-term monitoring results mapping their progression over the last 27 months and examine the active endpoints with extensive testing, including yet-to-cover aspects of long-term IP discovery, HTTP headers, and EDNS padding. Our results bring considerations for the implementation of various supporting mechanisms as well as the settings of the resolvers. We bring insights into the well-known resolvers' potential security, privacy, and performance risks.

Název v anglickém jazyce

Analysis of Well-Known DNS over HTTPS Resolvers

Popis výsledku anglicky

DNS over HTTPS (DoH) is one of the protocols adding encryption to DNS and aiming to improve users' privacy. DoH brings more centralization to DNS, leaving the users to pick the default predefined resolver by application or choose custom. Due to the difficulties of DoH resolver discovery, users depend on the publicly available DoH resolver lists. This work studies hundreds of well-known resolvers from comprehensive well-known DoH resolvers list. We provide long-term monitoring results mapping their progression over the last 27 months and examine the active endpoints with extensive testing, including yet-to-cover aspects of long-term IP discovery, HTTP headers, and EDNS padding. Our results bring considerations for the implementation of various supporting mechanisms as well as the settings of the resolvers. We bring insights into the well-known resolvers' potential security, privacy, and performance risks.

Druh

D - Stať ve sborníku

CEP obor

—

OECD FORD obor

10201 - Computer sciences, information science, bioinformathics (hardware development to be 2.2, social aspect to be 5.8)

Projekt

<a href="/cs/project/VJ02010024" target="_blank" >VJ02010024: Analýza šifrovaného provozu pomocí síťových toků</a><br>

Návaznosti

P - Projekt vyzkumu a vyvoje financovany z verejnych zdroju (s odkazem do CEP)

Rok uplatnění

2023

Kód důvěrnosti údajů

S - Úplné a pravdivé údaje o projektu nepodléhají ochraně podle zvláštních právních předpisů

Název statě ve sborníku

2023 IEEE 13th Annual Computing and Communication Workshop and Conference (CCWC)

ISBN

979-8-3503-3286-5

ISSN

—

e-ISSN

—

Počet stran výsledku

9

Strana od-do

516-524

Název nakladatele

Neuveden

Místo vydání

Las Vegas

Místo konání akce

Virtual

Datum konání akce

8. 3. 2023

Typ akce podle státní příslušnosti

WRD - Celosvětová akce

Kód UT WoS článku

000995182600081