EncDNS: A Lightweight Privacy-Preserving Name Resolution Service

Herrmann, Dominik; Fuchs, Karl-Peter; Lindemann, Jens; Federrath, Hannes

doi:10.1007/978-3-319-11203-9_3

Cited by 22 publications

(22 citation statements)

References 35 publications

Supporting

Mentioning

Contrasting

Unclassified

Order By: Relevance

“…The main goal is therefore to improve the efficiency of mixing and onion routing. This goal can be achieved in two ways: The first approach tries to tailor anonymity solutions to a specific application or protocol, as is the case for the EncDNS [18] service that relays encrypted DNS messages via DNS. The second approach consists in understanding and tuning the relationship between the underlying transport and the characteristics of the overlay network [40].…”

Section: Relationship Anonymitymentioning

confidence: 99%

Anonymity Online for Everyone: What Is Missing for Zero-Effort Privacy on the Internet?

Herrmann

Lindemann

Zimmer

et al. 2016

Open Problems in Network Security

Self Cite

View full text Add to dashboard Cite

Section: Relationship Anonymitymentioning

confidence: 99%

Anonymity Online for Everyone: What Is Missing for Zero-Effort Privacy on the Internet?

Herrmann

Lindemann

Zimmer

et al. 2016

Open Problems in Network Security

Self Cite

View full text Add to dashboard Cite

“…In this vein, we have proposed the EncDNS system [14], which repurposes the conventional DNS resolver (the one that is provided by the ISP) as a proxy server. In EncDNS, the original DNS queries are encrypted by the client and relayed via the conventional DNS resolver to an EncDNS server for name resolution.…”

Section: Pets For Dns Query Privacymentioning

confidence: 99%

Online privacy: Attacks and defenses

Herrmann

2015

It - Information Technology

Self Cite

View full text Add to dashboard Cite

I approach privacy issues on the Internet from two ends. On the one hand, I design and evaluate defensive measures, so-called privacy enhancing technologies (PETs), which can be used by individuals to protect themselves against surveillance on the Internet. On the other hand, I study the efficacy of offensive techniques. I am especially interested in passive surveillance techniques that cannot be detected. For instance, I have shown how machine learning techniques can be used to infer the contents of encrypted traffic and how to track users solely based on characteristic behavioral patterns.

show abstract

“…Likewise, to preserve user privacy the key distribution must be done in a way such that the ODNS resolver never learns the identity (i.e., IP address) of a client. This disqualifies out-of-band key exchange as proposed in [20]. Instead, we leverage the DNS infrastructure itself to distribute keys while maintaining privacy.…”

Section: Recursive Resolvermentioning

confidence: 99%

Oblivious DNS: Practical Privacy for DNS Queries

Schmitt

Edmundson

Mankin

et al. 2019

Proceedings on Privacy Enhancing Technologies

View full text Add to dashboard Cite

Virtually every Internet communication typically involves a Domain Name System (DNS) lookup for the destination server that the client wants to communicate with. Operators of DNS recursive resolvers-the machines that receive a client's query for a domain name and resolve it to a corresponding IP address-can learn significant information about client activity. Past work, for example, indicates that DNS queries reveal information ranging from web browsing activity to the types of devices that a user has in their home. Recognizing the privacy vulnerabilities associated with DNS queries, various third parties have created alternate DNS services that obscure a user's DNS queries from his or her Internet service provider. Yet, these systems merely transfer trust to a different third party. We argue that no single party ought to be able to associate DNS queries with a client IP address that issues those queries. To this end, we present Oblivious DNS (ODNS), which introduces an additional layer of obfuscation between clients and their queries. To do so, ODNS uses its own authoritative namespace; the authoritative servers for the ODNS namespace act as recursive resolvers for the DNS queries that they receive, but they never see the IP addresses for the clients that initiated these queries. We present an initial deployment of ODNS; our experiments show that ODNS introduces minimal performance overhead, both for individual queries and for web page loads. We design ODNS to be compatible with existing DNS protocols and infrastructure, and we are actively working on an open standard with the IETF.

show abstract

EncDNS: A Lightweight Privacy-Preserving Name Resolution Service

Cited by 22 publications

References 35 publications

Anonymity Online for Everyone: What Is Missing for Zero-Effort Privacy on the Internet?

Anonymity Online for Everyone: What Is Missing for Zero-Effort Privacy on the Internet?

Online privacy: Attacks and defenses

Oblivious DNS: Practical Privacy for DNS Queries

Contact Info

Product

Resources

About