Connection-Oriented DNS to Improve Privacy and Security
Explore a groundbreaking approach to enhancing DNS privacy and security in this 19-minute IEEE conference talk. Delve into the concept of T-DNS, which utilizes TCP and TLS to address common vulnerabilities in traditional UDP-based DNS. Learn how this innovative method prevents denial-of-service amplification attacks, reduces server vulnerability, and enables more flexible policy choices for key sizes. Discover the implementation strategies that make T-DNS a viable solution, including query pipelining, out-of-order responses, and optimized connection protocols. Examine real-world performance data demonstrating the modest latency impact and manageable server resource requirements of T-DNS. Gain insights into how this connection-oriented approach can significantly improve DNS security while maintaining efficiency in modern network environments.