Mutualized oblivious DNS ($\mu$ODNS): Hiding a tree in the wild forest
Jun Kurihara, Takeshi Kubo

TL;DR
The paper proposes $$ODNS, a multi-relay DNS scheme that enhances user privacy by hiding identities even against colluding relays and resolvers, with a practical implementation demonstrating comparable performance to existing methods.
Contribution
Introducing $$ODNS, a novel multi-relay DNS system that improves user anonymity with minimal trust assumptions and provides a publicly available proof-of-concept implementation.
Findings
$$ODNS effectively conceals user identities against colluding relays and resolvers.
The implementation achieves performance comparable to existing relay-based DNS schemes.
The scheme requires only a small trust assumption of at least one dedicated relay per user.
Abstract
The traditional Domain Name System (DNS) lacks fundamental features of security and privacy in its design. As concerns of privacy increased on the Internet, security and privacy enhancements of DNS have been actively investigated and deployed. Specially for user's privacy in DNS queries, several relay-based anonymization schemes have been recently introduced, however, they are vulnerable to the collusion of a relay with a full-service resolver, i.e., identities of users cannot be hidden to the resolver. This paper introduces a new concept of a multiple-relay-based DNS for user anonymity in DNS queries, called the mutualized oblivious DNS (ODNS), by extending the concept of existing relay-based schemes. The ODNS introduces a small and reasonable assumption that each user has at least one trusted/dedicated relay in a network and mutually shares the dedicated one with others. The…
Peer Reviews
No public reviews on file for this paper yet. If you reviewed it on a platform where reviews are public (OpenReview, ICLR, NeurIPS, ICML), you can paste yours below so the community can read it here.
Code & Models
Videos
No videos yet. Explain this paper in a talk, walkthrough, or lecture? Add one.
Taxonomy
TopicsInternet Traffic Analysis and Secure E-voting · IPv6, Mobility, Handover, Networks, Security · Advanced Authentication Protocols Security
