Sun 26 Feb 2017  

How to get a trustworthy DNS Privacy enabling recursive resolver

Event:

TLS from the stub client to a trusted recursive resolver can withstand the power and capabilities of a passive pervasive monitor, but it does not withstand an attacker that plugs itself into the path between an individual’s stub client and her trusted recursive resolver. To guarantee connectivity with the intended resolver it needs to be authenticated. In the presentation we give an analysis of the authentication mechanisms currently known to be operable for DNS over TLS and evaluate their usability and robustness metrics.


Related by DNS Privacy

  How to keep your ISP’s nose out of your browser history with encrypted DNS
  Sun 08 Apr 2018
  Media   DNS Privacy   Stubby
Blog post on DNS privacy by Sean Gallagher on Ars Technica
  How to Use Pihole With Stubby
  Mon 08 Jan 2018
  Media   DNS Privacy   Stubby
Guide by Frank Santoso describing how to use Stubby in the blockhole for Internet advertisements solution Pi-HOLE
  Quad9, a Public DNS Resolver - with Security
  Tue 21 Nov 2017
  Media   DNS Privacy   Stubby
Blog post on how to configure Stubby for use with Quad9 by Stéphane Bortzmeyer on RIPE Labs
  Privacy: Using DNS-over-TLS with the Quad9 DNS Service
  Mon 20 Nov 2017
  Media   DNS Privacy   Stubby
Blog post on how to configure Stubby for use with Quad9 by Alex Band
  DNS over TLS: experience from the Go6lab
  Tue 05 Sep 2017
  Media   DNS Privacy   Stubby
Jan Žorž giving Stubby a spin in this excellent article on ISOC's Deploy360 blog
  DNS Privacy daemon - Stubby
  Wed 23 Aug 2017
  Sara Dickinson   Stubby   DNS Privacy
A reference page on how to get up and running with Stubby!
  Der coole Stubby
  Fri 18 Aug 2017
  Media   DNS Privacy   Stubby
Stubby mentioned in article about progress in DNS privacy in c't magazine
  DNS Privacy
  Sun 16 Jul 2017
  Tutorial @ IETF99
  Sara Dickinson   DNS Privacy
DNS Privacy tutorial at the IETF99 in Prague
  DNS Privacy
  Thu 06 Jul 2017
  JCSA17
  Sara Dickinson   DNS Privacy
DNS Privacy tutorial at the JCSA17 in Paris
  Developing a monitoring plugin for DNS-over-TLS at the IETF hackathon
  Mon 27 Mar 2017
  Media   Hackathon   1.1.0 release   DNS Privacy
Stephane Bortzmeyer's blog post about developing a DNS-over-TLS monitor plugin at the IETF98 hackathon
  getdns covered in IPJ
  Wed 01 Mar 2017
  Media   DNS Privacy
getdns is discussed in DNS Privacy article by Geoff Huston and Joao Luis Silva Dama in the Internet Protocol Journal
  Another mention of Stubby in the register
  Tue 06 Dec 2016
  Media   Stubby   DNS Privacy
Stubby in The Register again in an article about IETF pervasive monitoring work
  The Register article about Stubby
  Tue 22 Nov 2016
  Media   Stubby   DNS Privacy
The popular UK online computer magazine theregister.co.uk published an article about Stubby
  heise.de article about Stubby
  Thu 17 Nov 2016
  Media   Stubby   DNS Privacy
The popular German online computer magazine Heise.de published an article about Stubby
  DNS Privacy
  Sun 13 Nov 2016
  Tutorial @ IETF97
  Sara Dickinson   Stubby   DNS Privacy
DNS Privacy tutorial mentioning stubby at the IETF97 in Seoul

Other by these authors

  Living on the Edge
  Sun 04 Feb 2018
  DNS devroom @ FOSDEM'18
  Willem Toorop   end-2-endness
Greatly needed stub resolver capabilities for applications and systems with the getdns library
  IETF100 Hackathon results
  Sun 12 Nov 2017
  Hackathon @ IETF100
  Benno Overeinder   Hackathon
Won "Best Overall" price at the IETF 100 Hackathon
  Living on the Edge
  Wed 25 Oct 2017
  DNS-WG @ RIPE75
  Benno Overeinder   end-2-endness
(Re)focus DNS Efforts on the End-Points
  IETF99 Hackathon results
  Sun 16 Jul 2017
  Hackathon @ IETF99
  Benno Overeinder   Hackathon
Overview of the DNS hackathon projects at the IETF99
  Hands on getdns
  Thu 06 Jul 2017
  JCSA17
  Sara Dickinson   Willem Toorop
Tutorial at the JCSA17 in Paris
  IETF97 Hackathon results
  Sun 13 Nov 2016
  Hackathon @ IETF97
  Benno Overeinder   Hackathon
Overview of the DNS hackathon projects at the IETF97
  Stubby
  Wed 19 Oct 2016
  NANOG68
  Willem Toorop   Stubby
Introducting Stubby at the NANOG68 in Dallas
  From the Ground Up Security
  Mon 11 Jul 2016
  JCSA16
  Benno Overeinder   end-2-endness
How DNS(SEC) provides building blocks for security and privacy from the very first query
  Advanced DNS Services: Application Security and User Privacy
  Tue 31 May 2016
  PyCon 2016
  Melinda Shore
Talk at PyCon 2016 about how to use new DNS features from python with getdns
  Enhanced getdns data access
  Wed 03 Feb 2016
  Melinda Shore   JSON Pointers
Motivation, introduction and demonstration of JSON-pointers
  DNSSEC for Legacy Applications
  Thu 19 Nov 2015
  DNS-WG @ RIPE71
  Willem Toorop
Presentation about an experimental nsswitch getdns component.
  getdns - A new stub resolver
  Sun 13 Sep 2015
  vBSDcon 2015
  Willem Toorop
Very complete overview presentation at te vBSDcon 2015 in Reston
  getdns API implementation
  Thu 14 May 2015
  OS-WG @ RIPE70
  Willem Toorop
Presentation in the Open Source Working Group at RIPE70 in Amsterdam
  getdns API
  Thu 26 Mar 2015
  Bits-n-Bites @ IETF92
  Sara Dickinson   Gowri Visweswaran   Willem Toorop
Poster presentation at the Bits-n-Bites of the IETF92
  getdns API implementation
  Wed 25 Jun 2014
  DNSSEC-WS @ ICANN50
  Willem Toorop
Presentation at the DNSSEC Workshop at ICANN50 in London
  getdns API implementation
  Wed 14 May 2014
  OS-WG @ RIPE68
  Willem Toorop
Lightning talk at the Open Source Working Group at RIPE 68 in Warsaw
  getdns API implementation
  Sun 11 May 2014
  DNS-OARC 2014 Spring-WS
  Willem Toorop
Presentation at the DNS-OARC Spring Workshop in Warsaw