Oblivious DNS over HTTPS (ODoH): A Practical Privacy Enhancement to DNS

Abstract The Internet’s Domain Name System (DNS) responds to client hostname queries with corresponding IP addresses and records. Traditional DNS is unencrypted leaks user information on-lookers. Recent efforts secure using over TLS (DoT) HTTPS (DoH) have been gaining traction, ostensibly protecting messages from third parties. However, the small number of available public large-scale DoT DoH resolvers has reinforced privacy concerns, specifically that operators could use query contents link activities identities. Oblivious (ODoH) safeguards against these problems. In this paper we implement deploy interoperable instantiations protocol, construct a formal model analysis, evaluate protocols’ performance wide-scale measurements. Results suggest ODoH practical privacy-enhancing replacement for DNS.