5 ms·
Distributing DNS queries across several resolvers is a good idea to make sure there's no single resolver would be able to learn the entire browsing history of a
by np-tokumei 5y ago
Distributing DNS queries across several resolvers is a good idea to make sure there's no single resolver would be able to learn the entire browsing history of a user. However, this distribution algorithm should be designed with care because distributing queries in a random or round-robin manner would lead to even worse privacy since every resolver will eventually learn the entire browsing history of the user.
We have conducted some preliminary work on this idea and shared it with the team at Firefox, but I guess the current number of Trusted Recursive Resolvers is not large enough. However, I do believe that once Firefox have more than a dozen TRRs, (or if Firefox allows users to input more than just one customized DoH resolver), our proposed K-resolver resolution mechanism would help to increase the privacy benefit of DoH even further.
"K-resolver: Towards Decentralizing Encrypted DNS Resolution"
https://www.ndss-symposium.org/wp-content/uploads/2020/02/23009-paper.pdf https://www.ndss-symposium.org/wp-content/uploads/2020/02/23...