Publication Details
Analysis of Well-Known DNS over HTTPS Resolvers
Ryšavý Ondřej, doc. Ing., Ph.D. (DIFS)
Burgetová Ivana, Ing., Ph.D. (DIFS)
DNS over HTTPS,DoH,DNS security,Security,Privacy,Measurement
DNS over HTTPS (DoH) is one of the protocols adding encryption to DNS and aiming to improve users' privacy. DoH brings more centralization to DNS, leaving the users to pick the default predefined resolver by application or choose custom. Due to the difficulties of DoH resolver discovery, users depend on the publicly available DoH resolver lists. This work studies hundreds of well-known resolvers from comprehensive well-known DoH resolvers list. We provide long-term monitoring results mapping their progression over the last 27 months and examine the active endpoints with extensive testing, including yet-to-cover aspects of long-term IP discovery, HTTP headers, and EDNS padding. Our results bring considerations for the implementation of various supporting mechanisms as well as the settings of the resolvers. We bring insights into the well-known resolvers' potential security, privacy, and performance risks.
@inproceedings{BUT185141,
author="Kamil {Jeřábek} and Ondřej {Ryšavý} and Ivana {Burgetová}",
title="Analysis of Well-Known DNS over HTTPS Resolvers",
booktitle="2023 IEEE 13th Annual Computing and Communication Workshop and Conference (CCWC)",
year="2023",
pages="516--524",
address="Las Vegas",
doi="10.1109/CCWC57344.2023.10099347",
isbn="979-8-3503-3286-5"
}