Assessing the Privacy Benefits of Domain Name Encryption
Assessing the Privacy Benefits of Domain Name Encryption
复制标题
评估域名加密的隐私优势
DOI：
10.1145/3320269.3384728
复制
发表时间：
2019
期刊：
影响因子：
--
通讯作者：
M. Polychronakis
中科院分区：
文献类型：
--
作者：
Nguyen Phong Hoang;Arian Akhavan Niaki;N. Borisov;Phillipa Gill;M. Polychronakis
随着互联网用户越来越了解他们的互联网通信被观察的可能性，网络流量加密技术的使用（例如，HTTPS/TLS）正在崛起。但是，即使启用了加密，用户也会通过DNS查询和TLS的服务器名称指示（SNI）扩展泄漏有关其访问的域的信息。最近有两个改善这个问题的提案是DNS over HTTPS/TLS（DoH/DoT）和加密SNI（ESNI）。在本文中，我们的目标是评估这些建议的隐私利益，考虑主机名和IP地址之间的关系，后者仍然暴露。我们从地球仪的九个Vantage位置执行DNS查询来描述这种关系。我们量化了ESNI为不同的托管和CDN提供商提供的隐私增益，使用两个不同的指标，k -匿名度由于共同托管和IP地址变化的动态。我们发现，20%的域研究将不会获得任何隐私的好处，因为他们有一个一对一的映射之间的主机名和IP地址。另一方面，30%的域名将在k值大于100的情况下获得显著的隐私优势，因为这些域名与100多个其他域名共同托管。访问者隐私将得到有意义改善的域名远不受欢迎，而对于受欢迎的域名，好处并不显著。分析长期域名的IP地址动态，我们发现只有7.7%的域名每天都会更改其托管IP地址。最后，我们讨论了网站所有者和托管/CDN提供商的潜在方法，以最大限度地提高ESNI的隐私优势。
As Internet users have become more savvy about the potential for their Internet communication to be observed, the use of network traffic encryption technologies (e.g., HTTPS/TLS) is on the rise. However, even when encryption is enabled, users leak information about the domains they visit via DNS queries and via the Server Name Indication (SNI) extension of TLS. Two recent proposals to ameliorate this issue are DNS over HTTPS/TLS (DoH/DoT) and Encrypted SNI (ESNI). In this paper we aim to assess the privacy benefits of these proposals by considering the relationship between hostnames and IP addresses, the latter of which are still exposed. We perform DNS queries from nine vantage points around the globe to characterize this relationship. We quantify the privacy gain offered by ESNI for different hosting and CDN providers using two different metrics, the k -anonymity degree due to co-hosting and the dynamics of IP address changes. We find that 20% of the domains studied will not gain any privacy benefit since they have a one-to-one mapping between their hostname and IP address. On the other hand, 30% will gain a significant privacy benefit with a k value greater than 100, since these domains are co-hosted with more than 100 other domains. Domains whose visitors' privacy will meaningfully improve are far less popular, while for popular domains the benefit is not significant. Analyzing the dynamics of IP addresses of long-lived domains, we find that only 7.7% of them change their hosting IP addresses on a daily basis. We conclude by discussing potential approaches for website owners and hosting/CDN providers for maximizing the privacy benefits of ESNI.
DOI：
10.1145/3321705.3329802
发表时间：
2019-07
期刊：
Proceedings of the 2019 ACM Asia Conference on Computer and Communications Security
影响因子：
--
作者：
Weiqi Cui;Tao Chen;C. Fields;Julian Chen;Anthony Sierra;Eric Chan-Tin
通讯作者：
Weiqi Cui;Tao Chen;C. Fields;Julian Chen;Anthony Sierra;Eric Chan-Tin
DOI：
10.1145/3278532.3278569
发表时间：
2018-10
期刊：
Proceedings of the Internet Measurement Conference 2018
影响因子：
--
作者：
K. Tian;Steve T. K. Jan;Hang Hu;D. Yao;G. Wang
通讯作者：
K. Tian;Steve T. K. Jan;Hang Hu;D. Yao;G. Wang
DOI：
10.1109/sp40000.2020.00014
发表时间：
2019-07
期刊：
2020 IEEE Symposium on Security and Privacy (SP)
影响因子：
--
作者：
Arian Akhavan Niaki;Shinyoung Cho;Zachary Weinberg;Nguyen Phong Hoang;Abbas Razaghpanah;Nicolas Christin;Phillipa Gill
通讯作者：
Arian Akhavan Niaki;Shinyoung Cho;Zachary Weinberg;Nguyen Phong Hoang;Abbas Razaghpanah;Nicolas Christin;Phillipa Gill