Oblivious DNS: Practical Privacy for DNS Queries
Oblivious DNS: Practical Privacy for DNS Queries
复制标题
Oblivious DNS：DNS 查询的实用隐私
DOI：
--
复制
发表时间：
2018
影响因子：
--
通讯作者：
N. Feamster
中科院分区：
文献类型：
--
作者：
Paul Schmitt;A. Edmundson;N. Feamster
摘要几乎每个Internet通信通常都涉及客户要与DNS递归解析器的运算符（接收客户端查询的机器）的域名系统（DNS）查找。 IP地址 - 例如，可以学习有关客户活动的重要信息。用户在他们的房屋中都有与DNS查询相关的隐私漏洞，各种第三方创建了替代的DNS服务，这些服务掩盖了用户的DNS查询，但这些系统只是将信任转移到不同的第三个第三个第三个信任。党派。忽略的DNS（ODN），它在客户及其查询之间引入了一个额外的混淆，ODN使用了自己的权威命名空间；他们从未看到启动这些查询的客户的IP地址。开销，无论是单个查询和网页加载，我们都设计ODN与现有的DNS协议和基础架构兼容，并且我们正在积极使用IETF进行开放标准。
Abstract Virtually every Internet communication typically involves a Domain Name System (DNS) lookup for the destination server that the client wants to communicate with. Operators of DNS recursive resolvers—the machines that receive a client’s query for a domain name and resolve it to a corresponding IP address—can learn significant information about client activity. Past work, for example, indicates that DNS queries reveal information ranging from web browsing activity to the types of devices that a user has in their home. Recognizing the privacy vulnerabilities associated with DNS queries, various third parties have created alternate DNS services that obscure a user’s DNS queries from his or her Internet service provider. Yet, these systems merely transfer trust to a different third party. We argue that no single party ought to be able to associate DNS queries with a client IP address that issues those queries. To this end, we present Oblivious DNS (ODNS), which introduces an additional layer of obfuscation between clients and their queries. To do so, ODNS uses its own authoritative namespace; the authoritative servers for the ODNS namespace act as recursive resolvers for the DNS queries that they receive, but they never see the IP addresses for the clients that initiated these queries. We present an initial deployment of ODNS; our experiments show that ODNS introduces minimal performance overhead, both for individual queries and for web page loads. We design ODNS to be compatible with existing DNS protocols and infrastructure, and we are actively working on an open standard with the IETF.
蒽环类药物：当好事变坏时。
影响因子：
3.2
作者：
Minotti,Giorgio;Sarvazyan,Narine
通讯作者：
Sarvazyan,Narine