DNS Privacy Considerations

Metadata

Publisher: IETF
Doc Type: Informational
Pages: 17
Abstract: This document describes the privacy issues associated with the use of the DNS by Internet users. It is intended to be an analysis of the present situation and does not prescribe solutions.
Publication Date: 2015-08-01
Status Note: Informational
DOI: 10.17487/RFC7626
Link: https://doi.org/10.17487/RFC7626
Author(s): Stéphane Bortzmeyer
Keyword(s): Confidentiality, Pervasive Surveillance, DNS

Latest version of IETF RFC 7626

Document Versions — IETF RFC 7626

▶ IETF RFC 7626 (2015-08-01)

THIS DOC [SUPERSEDED] [LATEST VERSION]

Normative Reference(s)

IETF RFC 1034 [Active*]
IETF RFC 1035 [Active, Amended*]
IETF RFC 6973 [Active*]
IETF RFC 7258 [Active*]

Bibliographic Reference(s)

10.1007-978-3-642-27937-9_10 — herrmann-reidentification EXTERNAL
10.1109-MUE.2007.84 — fangming-hori-sakurai EXTERNAL
10.1145-1452335.1452341 — day-at-root EXTERNAL
IETF.draft-ietf-dane-openpgpkey-03 — DANE-OPENPGPKEY EXTERNAL
IETF.draft-ietf-dnsop-dns-terminology-03 — DNS-TERMS EXTERNAL
IETF.draft-ietf-dnsop-edns-client-subnet-02 — CLIENT-SUBNET EXTERNAL
IETF.draft-ietf-dnsop-qname-minimisation-04 — QNAME-MINIMIZATION EXTERNAL
IETF.draft-ietf-dprive-start-tls-for-dns-01 — TLS-FOR-DNS EXTERNAL
ISBN.9783642238215 — federrath-fuchs-herrmann-piosecny EXTERNAL
Hesselman, C., Jansen, J., Wullink, M., Vink, K., and M. Simon, "A privacy framework for 'DNS big data' applications", November 2014, < https://www.sidnlabs.nl/uploads/tx_sidnpublications/ SIDN_Labs_Privacyraamwerk_Position_Paper_V1.4_ENG.pdf >. EXTERNAL
Weimer, F., "Passive DNS Replication", April 2005, < http://www.enyo.de/fw/software/dnslogger/#2 >. EXTERNAL
Grothoff, C., Wachs, M., Ermert, M., and J. Appelbaum, "NSA's MORECOWBELL: Knell for DNS", GNUnet e.V., January 2015, < https://gnunet.org/morecowbell >. EXTERNAL
Aben, E., "A RIPE Atlas View of Internet Meddling in Turkey", March 2014, < https://labs.ripe.net/Members/emileaben/ a-ripe-atlas-view-of-internet-meddling-in-turkey >. EXTERNAL
Yanbin, L. and G. Tsudik, "Towards Plugging Privacy Leaks in the Domain Name System", October 2009, < http://arxiv.org/abs/0910.2472 >. EXTERNAL
Castillo-Perez, S. and J. Garcia-Alfaro, "Anonymous Resolution of DNS Queries", 2008, < http://deic.uab.es/~joaquin/papers/is08.pdf >. EXTERNAL
Denis, F., "Security and privacy issues of edns-client- subnet", August 2013, < https://00f.net/2013/08/07/ edns-client-subnet/ >. EXTERNAL
Dagon, D., "Corrupted DNS Resolution Paths: The Rise of a Malicious Resolution Authority", ISC/OARC Workshop, 2007, < https://www.dns-oarc.net/files/workshop-2007/ Dagon-Resolution-corruption.pdf >. EXTERNAL
Bortzmeyer, S., "DNSmezzo", 2009, < http://www.dnsmezzo.net/ >. EXTERNAL
Thomas, M. and D. Wessels, "An Analysis of TCP Traffic in Root Server DITL Data", DNS-OARC 2014 Fall Workshop, October 2014, < https://indico.dns-oarc.net/event/20/ session/2/contribution/15/material/slides/1.pdf >. EXTERNAL
European Parliament, "Directive 95/46/EC of the European Pariament and of the council on the protection of individuals with regard to the processing of personal data and on the free movement of such data", Official Journal L 281, pp. 0031 - 0050, November 1995, < http://eur-lex.europa.eu/LexUriServ/ LexUriServ.do?uri=CELEX:31995L0046:EN:HTML>. EXTERNAL
Vinot, N., "Vie privee: et le DNS alors?", (In French), 2015, < https://blog.imirhil.fr/vie-privee-et-le-dns-alors.html >. EXTERNAL
Grangeia, L., "DNS Cache Snooping or Snooping the Cache for Fun and Profit", February 2004, < http://www.msit2005.mut.ac.th/msit_media/1_2551/nete4630/ materials/20080718130017Hc.pdf >. EXTERNAL
Wikipedia, "PRISM (surveillance program)", July 2015, < https://en.wikipedia.org/w/index.php?title=PRISM_ (surveillance_program)&oldid=673789455>. EXTERNAL
Tor, "DNS leaks in Tor", 2013, < https://www.torproject.org/docs/ faq.html.en#WarningsAboutSOCKSandDNSInformationLeaks >. EXTERNAL
CAIDA, "A Day in the Life of the Internet (DITL)", 2002, < http://www.caida.org/projects/ditl/ >. EXTERNAL
Wikipedia, "DNSChanger", October 2013, < https://en.wikipedia.org/w/ index.php?title=DNSChanger&oldid=578749672 >. EXTERNAL
PacketQ, "PacketQ Mailing List", < http://lists.iis.se/mailman/listinfo/packetq >. EXTERNAL
Stoner, E., "DNS Footprint of Malware", OARC Workshop, October 2010, < https://www.dns-oarc.net/files/ workshop-201010/OARC-ers-20101012.pdf >. EXTERNAL
Lemos, R., "Got Malware? Three Signs Revealed In DNS Traffic", InformationWeek Dark Reading, May 2013, < http://www.darkreading.com/analytics/security-monitoring/ got-malware-three-signs-revealed-in-dns-traffic/d/ d-id/1139680 >. EXTERNAL
Dot SE, "PacketQ, a simple tool to make SQL-queries against PCAP-files", 2011, < https://github.com/dotse/packetq/wiki >. EXTERNAL
IETF RFC 4033 [Active*]
IETF RFC 5155 [Active*]
IETF RFC 5936 [Active*]
IETF RFC 6269 [Active*]
IETF RFC 7624 [Active*]

Source Data (JSON)

Full registry record with provenance metadata. Open directly: /api/doc/RFC7626.json

Superseded by:

IETF RFC 9076 [Active*]

Reference Tree

Explore all references and references to this document, as a navigable tree.

Open Reference Tree

Reference this Doc

Plain text (ISO 690 compliant)

Preview:

IETF RFC 7626, DNS Privacy Considerations. Available at https://doi.org/10.17487/RFC7626

Snippet:

IETF RFC 7626, DNS Privacy Considerations. Available at https://doi.org/10.17487/RFC7626

HTML (ISO 690 compliant)

Preview:

IETF RFC 7626, DNS Privacy Considerations. Available at https://doi.org/10.17487/RFC7626

Snippet:

<span class="citation"><cite>IETF RFC 7626</cite>, DNS Privacy Considerations. Available at <a href="https://doi.org/10.17487/RFC7626" target="_blank" rel="noopener">https://doi.org/10.17487/RFC7626</a></span>

SMPTE's HTML Pub

Preview:

IETF RFC 7626, DNS Privacy Considerations
doi: 10.17487/RFC7626
url: https://doi.org/10.17487/RFC7626

Snippet:

<li>
<cite id="bib-rfc7626">IETF RFC 7626</cite>, DNS Privacy Considerations
<span class="doi">10.17487/RFC7626</span>
</li>

Referenced By

IETF RFC 7816 [Superseded*]
IETF RFC 7858 [Active*]
IETF RFC 8094 [Active*]
IETF RFC 8310 [Active*]
IETF RFC 8484 [Active*]
IETF RFC 8618 [Active*]
IETF RFC 8932 [Active*]
IETF RFC 9076 [Active*]