Publication detail

Analysis of Well-Known DNS over HTTPS Resolvers

JEŘÁBEK, K. RYŠAVÝ, O. BURGETOVÁ, I.

Original Title

Analysis of Well-Known DNS over HTTPS Resolvers

Type

conference paper

Language

English

Original Abstract

DNS over HTTPS (DoH) is one of the protocols adding encryption to DNS and aiming to improve users' privacy. DoH brings more centralization to DNS, leaving the users to pick the default predefined resolver by application or choose custom. Due to the difficulties of DoH resolver discovery, users depend on the publicly available DoH resolver lists. This work studies hundreds of well-known resolvers from comprehensive well-known DoH resolvers list. We provide long-term monitoring results mapping their progression over the last 27 months and examine the active endpoints with extensive testing, including yet-to-cover aspects of long-term IP discovery, HTTP headers, and EDNS padding. Our results bring considerations for the implementation of various supporting mechanisms as well as the settings of the resolvers. We bring insights into the well-known resolvers' potential security, privacy, and performance risks.

Keywords

DNS over HTTPS,DoH,DNS security,Security,Privacy,Measurement

Authors

JEŘÁBEK, K.; RYŠAVÝ, O.; BURGETOVÁ, I.

Released

12. 3. 2023

Location

Las Vegas

ISBN

979-8-3503-3286-5

Book

2023 IEEE 13th Annual Computing and Communication Workshop and Conference (CCWC)

Pages from

516

Pages to

524

Pages count

9

BibTex

@inproceedings{BUT185141,
  author="Kamil {Jeřábek} and Ondřej {Ryšavý} and Ivana {Burgetová}",
  title="Analysis of Well-Known DNS over HTTPS Resolvers",
  booktitle="2023 IEEE 13th Annual Computing and Communication Workshop and Conference (CCWC)",
  year="2023",
  pages="516--524",
  address="Las Vegas",
  doi="10.1109/CCWC57344.2023.10099347",
  isbn="979-8-3503-3286-5"
}