Publication Details
Analysis of Well-Known DNS over HTTPS Resolvers
Ryšavý Ondřej, doc. Ing., Ph.D. (DIFS)
Burgetová Ivana, Ing., Ph.D. (DIFS)
DNS over HTTPS,DoH,DNS security,Security,Privacy,Measurement
DNS over HTTPS (DoH) is one of the protocols adding encryption to DNS and aiming
to improve users' privacy. DoH brings more centralization to DNS, leaving the
users to pick the default predefined resolver by application or choose custom.
Due to the difficulties of DoH resolver discovery, users depend on the publicly
available DoH resolver lists. This work studies hundreds of well-known resolvers
from comprehensive well-known DoH resolvers list. We provide long-term monitoring
results mapping their progression over the last 27 months and examine the active
endpoints with extensive testing, including yet-to-cover aspects of long-term IP
discovery, HTTP headers, and EDNS padding. Our results bring considerations for
the implementation of various supporting mechanisms as well as the settings of
the resolvers. We bring insights into the well-known resolvers' potential
security, privacy, and performance risks.
@inproceedings{BUT185141,
author="Kamil {Jeřábek} and Ondřej {Ryšavý} and Ivana {Burgetová}",
title="Analysis of Well-Known DNS over HTTPS Resolvers",
booktitle="2023 IEEE 13th Annual Computing and Communication Workshop and Conference (CCWC)",
year="2023",
pages="516--524",
address="Las Vegas",
doi="10.1109/CCWC57344.2023.10099347",
isbn="979-8-3503-3286-5"
}