How DNS over HTTPS is Reshaping Privacy, Performance, and Policy in the Internet Ecosystem

Borgolte, Kevin; Chattopadhyay, Tithi; Feamster, Nick; Kshirsagar, Mihir; Holland, Jordan; Hounsel, Austin; Schmitt, Paul

doi:10.2139/ssrn.3427563

Cited by 36 publications

(29 citation statements)

References 0 publications

Supporting

Mentioning

Contrasting

Unclassified

Order By: Relevance

“…Tanpa enkripsi, Penyedia Layanan Internet (ISP) dapat mencatat kueri DNS ini dan pendengar lain di jaringan dapat menguping kueri yang dilakukan oleh pengguna internet. Selain hanya menguping, respons DNS juga dapat dimanipulasi oleh pihak ketiga untuk mengembalikan jawaban yang salah atas pertanyaan, mungkin menyebabkan pengguna ke situs web berbahaya, seperti yang disebutkan dalam RFC 7626 (Borgolte et al, 2019).…”

Section: Dns Over Httpsunclassified

Implementasi Keamanan Jalur Internet Menggunakan IP Tunneling pada OpenVPN Access Server dengan Protokol OpenVPN dan Protokol DNS Over HTTPS

Winawang

2021

JSA

View full text Add to dashboard Cite

OpenVPN access server merupakan salah satu solusi VPN yang sangat cocok diterapkan untuk perusahaan maupun personal karena mudah dikonfigurasi dan bisa dipasang pada server secara on-premise. Walaupun pengguna sudah menggunakan protokol OpenVPN namun masih ada celah keamanan pada sisi DNS apabila masih menggunakan DNS milik ISP yang menerapkan banyak filtering. Untuk itu protokol OpenVPN dapat digabungkan dengan protokol DNS Over HTTPS (DOH) agar traffic DNS juga sulit dimanipulasi atau diblokir. Keamanan dan kestabilan akses menggunakan OpenVPN mempunyai Quality of Service (QoS) yang mendekati akses langsung, yang mempunyai nilai selisih paket dikirim dibanding paket diterima sekitar 1,7%. Ketika ditambahkan protokol OpenVPN dan protokol DOH secara bersamaan maka selisih rata-rata paket loss akan naik menjadi 1,8%. Akses ke DNS dengan OpenVPN+DOH mempunyai response time yang lebih besar dibandingkan dengan akses DNS ke ISP secara langsung. Namun response time DNS ini tidak terlalu berpengaruh pada kecepatan akses karena DNS berfungsi untuk menerjemahkan alamat domain menjadi IP address. Tujuan dari penelitian ini adalah untuk melakukan analisis keamanan akses internet dengan cara melakukan dial VPN menggunakan protocol OpenVPN yang digabungkan dengan protokol DNS Over HTTPS.

show abstract

Section: Dns Over Httpsunclassified

Implementasi Keamanan Jalur Internet Menggunakan IP Tunneling pada OpenVPN Access Server dengan Protokol OpenVPN dan Protokol DNS Over HTTPS

Winawang

2021

JSA

View full text Add to dashboard Cite

show abstract

“…Work [21] analyzes the vulnerabilities of the DoT protocol. Article [22] explores the performance of the DoH protocol and the impact of DNS traffic encryption protocols on Internet space participants. However, the issue of implementing measures to increase the privacy of users when communicating on the Internet remains unresolved.…”

Section: Literature Review and Problem Statementmentioning

confidence: 99%

Development of an algorithm to protect user communication devices against data leaks

Zadereyko

Prokop

Trofymenko

et al. 2021

EEJET

View full text Add to dashboard Cite

In order to identify ways used to collect data from user communication devices, an analysis of the interaction between DNS customers and the Internet name domain space has been carried out. It has been established that the communication device's DNS traffic is logged by the DNS servers of the provider, which poses a threat to the privacy of users. A comprehensive algorithm of protection against the collection of user data, consisting of two modules, has been developed and tested. The first module makes it possible to redirect the communication device's DNS traffic through DNS proxy servers with a predefined anonymity class based on the proposed multitest. To ensure a smooth and sustainable connection, the module automatically connects to a DNS proxy server that has minimal response time from those available in the compiled list. The second module blocks the acquisition of data collected by the developers of the software installed on the user's communication device, as well as by specialized Internet services owned by IT companies. The proposed algorithm makes it possible for users to choose their preferred level of privacy when communicating with the Internet space, thereby providing them with a choice of privacy level and, as a result, limiting the possibility of information manipulation over their owners. The DNS traffic of various fixed and mobile communication devices has been audited. The analysis of DNS traffic has enabled to identify and structure the DNS requests responsible for collecting data from users by the Internet services owned by IT companies. The identified DNS queries have been blocked; it has been experimentally confirmed that the performance of the basic and application software on communication devices was not compromised.

show abstract

“…With the exception of the political negotiations around the domain name registration system in particular the creation and subsequent reform of the Internet Corporation for Assigned Names and Numbers (ICANN), the non-profit private American corporation that oversees the management of the DNS (Mueller 2004;Radu 2019)the dynamics in the domain name market and its recent concentration trends have not received enough scholarly attention. Significant exceptions include recent studies by Borgolte et al (2019) and Huston (2019), who started to shed light on effects that go beyond the technical aspects, assessing legal, economic and political consequences.…”

Section: The Dns Market Over Timementioning

confidence: 99%

Consolidation in the DNS resolver market – how much, how fast, how dangerous?

Radu

Hausding

2020

Journal of Cyber Policy

View full text Add to dashboard Cite

Almost all online services use a domain name resolution function to translate names typed by the user into numbers that computers understand. This basic, recursive function, performed in milliseconds and invisible to the user, was integrated from the beginning into the operation of Internet Service Providers (ISPs). This started to change with the advent of new playerssuch as Google, Cloudflare, Oracleoperating public resolvers and rendering the market more dynamic in the last decade. As more technologies are developed to increase the privacy and security of the domain name system (DNS) protocol, large internet companies with global operations appear better equipped to integrate the latest requirements and offer their services free to users and ISPs, further consolidating their position in the market. This article provides a timely analysis of the emerging trends of consolidation in the recursive DNS services market, focusing on its evolution in the last decade and discussing empirical evidence for the shifts occurring from 2016 to mid-2019.

show abstract

How DNS over HTTPS is Reshaping Privacy, Performance, and Policy in the Internet Ecosystem

Cited by 36 publications

References 0 publications

Implementasi Keamanan Jalur Internet Menggunakan IP Tunneling pada OpenVPN Access Server dengan Protokol OpenVPN dan Protokol DNS Over HTTPS

Implementasi Keamanan Jalur Internet Menggunakan IP Tunneling pada OpenVPN Access Server dengan Protokol OpenVPN dan Protokol DNS Over HTTPS

Development of an algorithm to protect user communication devices against data leaks

Consolidation in the DNS resolver market – how much, how fast, how dangerous?

Contact Info

Product

Resources

About