Internet security

World Wide Web

Transport Layer Security

Computer security

Encryption

Server

The Internet

Computer science

Domain Name System

Computer network

Internet privacy

Vulnerability (computing)

Compromise

Information security

Sociology

Security service

Social science

DNS packets are designed to travel in unencrypted form through the Internet based on its initial standard. Recent discoveries show that real-world adversaries are actively exploiting this design vulnerability to compromise Internet users' security and privacy. To mitigate such threats, several protocols have been proposed to encrypt DNS queries between DNS clients and servers, which we jointly term as DNS-over-Encryption. While some proposals have been standardized and are gaining strong support from the industry, little has been done to understand their status from the view of global users.

An End-to-End, Large-Scale Measurement of DNS-over-Encryption