DOH! Wait, what? DNS over https?
summary
A working DNS-over-HTTPS (DoH) proxy is demonstrated that sends DNS queries over HTTPS to public resolvers such as Google Public DNS. The talk measures lookup latency and cache behavior, shows which browsers (Chrome, Firefox) support DoH, evaluates when DoH increases or decreases observable delays, and tests whether DoH can bypass DNS-based censorship (e.g., in China), including traffic captures and checks of which authoritative nameserver records survive the tunnel and whether the setup is reliable.
AI-written summary · about
chapters (8)
- 0:00Introduction
- 3:35DNS concepts and protocols
- 8:27Root servers and management
- 12:02Internet infrastructure and organizations
- 16:12DNS traffic and data flow
- 20:21DNS security and encryption
- 23:12Practical implementation and challenges
- 25:52Summary
related talks
11mA Comprehensive Study of DNS-over-HTTPS Downgrade Attack
01h 42mIt’s DNS, Jim, but not as we know it
26mIt Is Always DNS… Even at the Edge: Taming Proxy-Only Lookups With Cilium and eBPF
15mYou Depend on DNS, This Is How It Works and You Won't...
20mWho Is Answering My Queries: Understanding and Characterizing Interception of the DNS Resolution Path
25mProtective DNS, DNS Encryption, & Zero-Trust: Tackling NSA Guidance
09mDNS is the entry point for every application on the internet
53mQUIC, TLS 1.3, DNS-over-HTTPS, everywhere next