Internet Technologies > Domain Name System (DNS) Privacy
Domain Name System (DNS) Privacy
Almost every time we use an Internet application, it starts with a Domain Name System (DNS) transaction to map a human-friendly domain name into a set of IP addresses that can be used to deliver packets over the Internet.
The Domain Name System (DNS) was originally developed without any kind of considerations for user privacy and may therefore leak information about DNS queries and responses that can be correlated to specific network activity (e.g. applications employed, web sites visited, people communicated with, etc.). Since pervasive monitoring became a major concern in protocol development, a number of efforts have aimed improve the privacy properties of important Internet protocols. “DNS Privacy” refers to the privacy improvements recently made to the Domain Name System.
Basics
Specifications
- RFC 7816: DNS Query Name Minimisation to Improve Privacy
- RFC 7858: Specification for DNS over Transport Layer Security (TLS)
- RFC 8094: DNS over Datagram Transport Layer Security (DTLS)
- RFC 8484: DNS Queries over HTTPS (DoH)