EncDNS: A Lightweight Privacy-Preserving Name Resolution Service
EncDNS: A Lightweight Privacy-Preserving Name Resolution Service
复制标题
EncDNS：轻量级隐私保护名称解析服务
DOI：
--
复制
发表时间：
2014
期刊：
影响因子：
--
通讯作者：
H. Federrath
中科院分区：
文献类型：
--
作者：
Dominik Herrmann;Karl;Jens Lindemann;H. Federrath
用户越来越多地转向第三方 DNS 解析器（例如 Google Public DNS 和 OpenDNS）。由此产生的监控能力对在线隐私构成了新的威胁。在本文中，我们提出了 EncDNS，这是一种新颖的轻量级隐私保护名称解析服务，可以替代传统的第三方解析器。 EncDNS 协议基于 DNSCurve，将加密消息封装在符合标准的 DNS 消息中。通过利用传统 DNS 解析器为 EncDNS 服务器提供发送者匿名的事实，可以保护用户隐私。与混合或洋葱路由等传统隐私保护技术不同，这些技术由于通过多跳路由消息而导致相当大的延迟，EncDNS 架构仅引入一台额外的服务器，以便针对现实对手实现足够的保护级别。 EncDNS 是开源软件。初步测试部署可供公众使用。
Users are increasingly switching to third party DNS resolvers (e. g., Google Public DNS and OpenDNS). The resulting monitoring capabilities constitute an emerging threat to online privacy. In this paper we present EncDNS, a novel lightweight privacy-preserving name resolution service as a replacement for conventional third-party resolvers. The EncDNS protocol, which is based on DNSCurve, encapsulates encrypted messages in standards-compliant DNS messages. User privacy is protected by exploiting the fact that a conventional DNS resolver provides sender anonymity against the EncDNS server. Unlike traditional privacy-preserving techniques like mixes or onion routing, which introduce considerable delays due to routing messages over multiple hops, the EncDNS architecture introduces only one additional server in order to achieve a sufficient level of protection against realistic adversaries. EncDNS is open source software. An initial test deployment is available for public use.