An Empirical Study of the Cost of DNS-over-HTTPS

09/13/2019
by   Timm Boettger, et al.
0

DNS is a vital component for almost every networked application. Originally it was designed as an unencrypted protocol, making user security a concern. DNS-over-HTTPS (DoH) is the latest proposal to make name resolution more secure. In this paper we study the current DNS-over-HTTPS ecosystem, especially the cost of the additional security. We start by surveying the current DoH landscape by assessing standard compliance and supported features of public DoH servers. We then compare different transports for secure DNS, to highlight the improvements DoH makes over its predecessor, DNS-over-TLS (DoT). These improvements explain in part the significantly larger take-up of DoH in comparison to DoT. Finally, we quantify the overhead incurred by the additional layers of the DoH transport and their impact on web page load times. We find that these overheads only have limited impact on page load times, suggesting that it is possible to obtain the improved security of DoH with only marginal performance impact.

READ FULL TEXT

page 1

page 2

page 3

page 4

research
06/20/2023

On Cross-Layer Interactions of QUIC, Encrypted DNS and HTTP/3: Design, Evaluation and Dataset

Every Web session involves a DNS resolution. While, in the last decade, ...
research
02/22/2018

Investigating the Evolvability of Web Page Load Time

Client-side Javascript execution environments (browsers) allow anonymous...
research
01/24/2020

K-resolver: Towards Decentralizing Encrypted DNS Resolution

Centralized DNS over HTTP/TLS (DoH/DoT) resolution, which has started be...
research
10/20/2020

Exploring HTTPS Security Inconsistencies: A Cross-Regional Perspective

If two or more identical HTTPS clients, located at different geographic ...
research
05/01/2023

DNS Privacy with Speed? Evaluating DNS over QUIC and its Impact on Web Performance

Over the last decade, Web traffic has significantly shifted towards HTTP...
research
06/05/2021

Fortifying Vehicular Security Through Low Overhead Physically Unclonable Functions

Within vehicles, the Controller Area Network (CAN) allows efficient comm...

Please sign up or login with your details

Forgot password? Click here to reset