A First Look at SVCB and HTTPS DNS Resource Records in the Wild
Johannes Zirngibl, Patrick Sattler, Georg Carle

TL;DR
This study provides the first large-scale analysis of SVCB and HTTPS DNS resource records, revealing their deployment status, common configurations, and correctness across millions of domains, highlighting increasing adoption and potential privacy benefits.
Contribution
It offers the first comprehensive overview of SVCB and HTTPS record deployment in the wild, analyzing over 400 million domains and verifying record correctness.
Findings
Nearly 4,000 SVCB and 10.5 million HTTPS records observed.
Most records contain ALPN and IP hints, mainly hosted by Cloudflare.
Over 93% of records verified as correct through application layer scans.
Abstract
The Internet Engineering Task Force is standardizing new DNS resource records, namely SVCB and HTTPS. Both records inform clients about endpoint and service properties such as supported application layer protocols, IP address hints or Encrypted Client Hello (ECH) information. Therefore, they allow clients to reduce required DNS queries and potential retries during connection establishment and thus help to improve the quality of experience and privacy of the client. The latter is achieved by reducing visible meta-data, which is further improved with encrypted DNS and ECH. The standardization is in its final stages and companies announced support, e.g., Cloudflare and Apple. Therefore, we provide the first large-scale overview of actual record deployment by analyzing more than 400 M domains. We find 3.96 k SVCB and 10.5 M HTTPS records. As of March 2023, Cloudflare hosts and serves most…
Peer Reviews
No public reviews on file for this paper yet. If you reviewed it on a platform where reviews are public (OpenReview, ICLR, NeurIPS, ICML), you can paste yours below so the community can read it here.
Videos
No videos yet. Explain this paper in a talk, walkthrough, or lecture? Add one.
