Understanding User Awareness and Behaviors Concerning Encrypted DNS Settings

08/09/2022
by   Alexandra Nisenoff, et al.
0

Recent developments to encrypt the Domain Name System (DNS) have resulted in major browser and operating system vendors deploying encrypted DNS functionality, often enabling various configurations and settings by default. In many cases, default encrypted DNS settings have implications for performance and privacy; for example, Firefox's default DNS setting sends all of a user's DNS queries to Cloudflare, potentially introducing new privacy vulnerabilities. In this paper, we confirm that most users are unaware of these developments – with respect to the rollout of these new technologies, the changes in default settings, and the ability to customize encrypted DNS configuration to balance user preferences between privacy and performance. Our findings suggest several important implications for the designers of interfaces for encrypted DNS functionality in both browsers and operating systems, to help improve user awareness concerning these settings, and to ensure that users retain the ability to make choices that allow them to balance tradeoffs concerning DNS privacy and performance.

READ FULL TEXT

page 11

page 13

page 16

page 28

research
08/28/2023

Skip, Skip, Skip, Accept!!!: A Study on the Usability of Smartphone Manufacturer Provided Default Features and User Privacy

Smartphone manufacturer provided default features (e.g., default locatio...
research
10/10/2022

Systematic Evaluation and User Study of Privacy of Default Apps in Apple's Mobile Ecosystem

Users need to configure default apps when they first start using their d...
research
08/09/2022

Measuring the Availability and Response Times of Public Encrypted DNS Resolvers

Unencrypted DNS traffic between users and DNS resolvers can lead to priv...
research
05/11/2019

GraphSE^2: An Encrypted Graph Database for Privacy-Preserving Social Search

In this paper, we propose GraphSE^2, an encrypted graph database for onl...
research
02/20/2020

D-DNS: Towards Re-Decentralizing the DNS

Nearly all Internet services rely on the Domain Name System (DNS) to res...
research
07/24/2019

Measuring ad value without bankrupting user privacy

Recent work has demonstrated that by monitoring the Real Time Bidding (R...
research
09/20/2023

Data Exfiltration by Hotjar Revisited

Session replay scripts allow website owners to record the interaction of...

Please sign up or login with your details

Forgot password? Click here to reset