Oblivious DNS: Practical Privacy for DNS Queries
Paul Schmitt, Anne Edmundson, Nick Feamster

TL;DR
Oblivious DNS (ODNS) enhances DNS privacy by adding an obfuscation layer that prevents resolvers from linking queries to client IPs, with minimal performance impact and compatibility with existing infrastructure.
Contribution
We introduce ODNS, a practical privacy-preserving DNS system that prevents query-IP association, compatible with current DNS protocols, and demonstrate its low overhead through initial deployment.
Findings
ODNS adds minimal latency to DNS queries and web loading.
ODNS effectively prevents resolvers from linking DNS queries to client IP addresses.
Initial deployment shows ODNS's practicality and compatibility with existing DNS infrastructure.
Abstract
Virtually every Internet communication typically involves a Domain Name System (DNS) lookup for the destination server that the client wants to communicate with. Operators of DNS recursive resolvers---the machines that receive a client's query for a domain name and resolve it to a corresponding IP address---can learn significant information about client activity. Past work, for example, indicates that DNS queries reveal information ranging from web browsing activity to the types of devices that a user has in their home. Recognizing the privacy vulnerabilities associated with DNS queries, various third parties have created alternate DNS services that obscure a user's DNS queries from his or her Internet service provider. Yet, these systems merely transfer trust to a different third party. We argue that no single party ought to be able to associate DNS queries with a client IP address…
Peer Reviews
No public reviews on file for this paper yet. If you reviewed it on a platform where reviews are public (OpenReview, ICLR, NeurIPS, ICML), you can paste yours below so the community can read it here.
Videos
No videos yet. Explain this paper in a talk, walkthrough, or lecture? Add one.
