IETF RFC 9076
[ACTIVE]
DNS Privacy Considerations
Metadata
- Publisher
- IETF
- Doc Type
- Informational
- Pages
- 22
- Abstract
- This document describes the privacy issues associated with the use of the DNS by Internet users. It provides general observations about typical current privacy practices. It is intended to be an analysis of the present situation and does not prescribe solutions. This document obsoletes RFC 7626.
- Publication Date
- 2021-07-01
- Status Note
- Informational
- DOI
10.17487/RFC9076- Link
- https://doi.org/10.17487/RFC9076
- Author(s)
- Tim Wicinski
- Keyword(s)
- DNS
Latest version of IETF RFC 9076
Document Versions — IETF RFC 9076
-
▶ IETF RFC 9076 (2021-07-01)THIS DOC [ACTIVE] [LATEST VERSION]
Normative Reference(s)
- IETF RFC 1034 [Active*]
- IETF RFC 1035 [Active, Amended*]
- IETF RFC 6973 [Active*]
- IETF RFC 7258 [Active*]
Bibliographic Reference(s)
- 10.1007-978-3-540-88873-4_5 — castillo-garcia EXTERNAL
- 10.1007-978-3-642-23822-2_36 — federrath-fuchs-herrmann-piosecny EXTERNAL
- 10.1007-978-3-642-27937-9_10 — herrmann-reidentification EXTERNAL
- 10.1109-MUE.2007.84 — fangming-hori-sakurai EXTERNAL
- 10.1145-1452335.1452341 — day-at-root EXTERNAL
- 10.1145-2665943.2665959 — Pitfalls-of-DNS-Encryption EXTERNAL
- 10.1145-3355369.3355580 — dns-over-encryption EXTERNAL
- GITHUB.DNS-OARC.PacketQ — packetq EXTERNAL
- IETF.draft-ietf-dnsop-resolver-information-01 — I-D.ietf-dnsop-resolver-information EXTERNAL
- IETF.draft-ietf-dprive-dnsoquic-03 — I-D.ietf-dprive-dnsoquic EXTERNAL
- de Vries, W., "Making the DNS More Private with QNAME Minimisation", April 2019, <https://labs.ripe.net/Members/wouter_de_vries/make-dns-a-bit-more-private-with-qname-minimisation>. EXTERNAL
- Hesselman, C., Jansen, J., Wullink, M., Vink, K., and M. Simon, "A privacy framework for 'DNS big data' applications", November 2014, <https://www.sidnlabs.nl/downloads/yBW6hBoaSZe4m6GJc_0b7w/2211058ab6330c7f3788141ea19d3db7/SIDN_Labs_Privacyraamwerk_Position_Paper_V1.4_ENG.pdf>. EXTERNAL
- Thomas, M. and D. Wessels, "An Analysis of TCP Traffic in Root Server DITL Data", DNS-OARC 2014 Fall Workshop, October 2014, <https://indico.dns-oarc.net/event/20/session/2/contribution/15/material/slides/1.pdf>. EXTERNAL
- Orevi, L., Herzberg, A., Zlatokrilov, H., and D. Sigron, "DNS-DNS: DNS-based De-NAT Scheme", January 2017, <https://www.researchgate.net/publication/320322146_DNS-DNS_DNS-based_De-NAT_Scheme>. EXTERNAL
- Dagon, D., "Corrupted DNS Resolution Paths: The Rise of a Malicious Resolution Authority", ISC/OARC Workshop, 2007, <https://www.dns-oarc.net/files/workshop-2007/Dagon-Resolution-corruption.pdf>. EXTERNAL
- Denis, F., "Security and privacy issues of edns-client-subnet", August 2013, <https://00f.net/2013/08/07/edns-client-subnet/>. EXTERNAL
- Tor, "Tor FAQs: I keep seeing these warnings about SOCKS and DNS information leaks. Should I worry?", <https://www.torproject.org/docs/faq.html.en#WarningsAboutSOCKSandDNSInformationLeaks>. EXTERNAL
- Yanbin, L. and G. Tsudik, "Towards Plugging Privacy Leaks in Domain Name System", June 2010, <https://arxiv.org/abs/0910.2472>. EXTERNAL
- EDDI, "Encrypted DNS Deployment Initiative", <https://www.encrypted-dns.org>. EXTERNAL
- CAIDA, "A Day in the Life of the Internet (DITL)", <https://www.caida.org/projects/ditl/>. EXTERNAL
- ISC, "DNS Cache snooping - should I be concerned?", October 2018, <https://kb.isc.org/docs/aa-00482>. EXTERNAL
- Wikipedia, "PRISM (surveillance program)", July 2015, <https://en.wikipedia.org/w/index.php?title=PRISM_(surveillance_program)&oldid=673789455>. EXTERNAL
- European Parliament, "Directive 95/46/EC of the European Parliament and of the Council of 24 October 1995 on the protection of individuals with regard to the processing of personal data and on the free movement of such data", Official Journal L 281, pp. 31-50, November 1995, <https://eur-lex.europa.eu/LexUriServ/LexUriServ.do?uri=CELEX:31995L0046:EN:HTML>. EXTERNAL
- De Filippi, P. and S. McCarthy, "Cloud Computing: Centralization and Data Sovereignty", European Journal of Law and Technology, Vol. 3, No. 2, October 2012, <https://papers.ssrn.com/sol3/papers.cfm?abstract_id=2167372>. EXTERNAL
- Lemos, R., "Got Malware? Three Signs Revealed In DNS Traffic", May 2013, <https://www.darkreading.com/analytics/security-monitoring/got-malware-three-signs-revealed-in-dns-traffic/d/d-id/1139680>. EXTERNAL
- Bortzmeyer, S., "DNSmezzo", <http://www.dnsmezzo.net/>. EXTERNAL
- Grangeia, L., "Cache Snooping or Snooping the Cache for Fun and Profit", 2005, <https://www.semanticscholar.org/paper/Cache-Snooping-or-Snooping-the-Cache-for-Fun-and-1-Grangeia/9b22f606e10b3609eafbdcbfc9090b63be8778c3>. EXTERNAL
- Grothoff, C., Wachs, M., Ermert, M., and J. Appelbaum, "NSA's MORECOWBELL: Knell for DNS", January 2015, <https://pdfs.semanticscholar.org/2610/2b99bdd6a258a98740af8217ba8da8a1e4fa.pdf>. EXTERNAL
- Stoner, E., "DNS Footprint of Malware", OARC Workshop, October 2010, <https://www.dns-oarc.net/files/workshop-201010/OARC-ers-20101012.pdf>. EXTERNAL
- Weimer, F., "Passive DNS Replication", 17th Annual FIRST Conference, April 2005, <https://www.first.org/conference/2005/papers/florian-weimer-slides-1.pdf>. EXTERNAL
- "getdns", <https://getdnsapi.net>. EXTERNAL
- Vinot, N., "Vie privée: et le DNS alors? [Privacy: what about DNS?]", February 2015, <https://blog.imirhil.fr/vie-privee-et-le-dns-alors.html>. EXTERNAL
- IETF RFC 3552 [Active*]
- IETF RFC 4033 [Active*]
- IETF RFC 4470 [Active*]
- IETF RFC 5155 [Active*]
- IETF RFC 5936 [Active*]
- IETF RFC 6269 [Active*]
- IETF RFC 6891 [Active*]
- IETF RFC 7413 [Active*]
- IETF RFC 7525 [Superseded*]
- IETF RFC 7624 [Active*]
- IETF RFC 7626 [Superseded*]
- IETF RFC 7721 [Active*]
- RFC7754 — RFC7754 EXTERNAL
- IETF RFC 7816 [Superseded*]
- IETF RFC 7858 [Active*]
- IETF RFC 7871 [Active*]
- IETF RFC 7873 [Active*]
- IETF RFC 7929 [Active*]
- IETF RFC 8446 [Superseded*]
- IETF RFC 8484 [Active*]
- IETF RFC 8499 [Superseded*]
- RFC8744 — RFC8744 EXTERNAL
- RFC8890 — RFC8890 EXTERNAL
- IETF RFC 8932 [Active*]
- IETF RFC 9000 [Active*]
Source Data (JSON)
Full registry record with provenance metadata. Open directly: /api/doc/RFC9076.json
Supersedes:
IETF RFC 7626 [Superseded*]
Reference Tree
Explore all references and references to this document, as a navigable tree.
Open Reference TreeReference this Doc
Plain text (ISO 690 compliant)
Preview:
IETF RFC 9076, DNS Privacy Considerations. Available at https://doi.org/10.17487/RFC9076
Snippet:
IETF RFC 9076, DNS Privacy Considerations. Available at https://doi.org/10.17487/RFC9076
HTML (ISO 690 compliant)
Preview:
IETF RFC 9076, DNS Privacy Considerations. Available at https://doi.org/10.17487/RFC9076
Snippet:
<span class="citation"><cite>IETF RFC 9076</cite>, DNS Privacy Considerations. Available at <a href="https://doi.org/10.17487/RFC9076" target="_blank" rel="noopener">https://doi.org/10.17487/RFC9076</a></span>
SMPTE's HTML Pub
Preview:
Snippet:
<li> <cite id="bib-rfc9076">IETF RFC 9076</cite>, DNS Privacy Considerations <span class="doi">10.17487/RFC9076</span> </li>
Referenced By
- IETF draft-arkko-iab-data-minimization-principle-05 [Active*]
- IETF RFC 9103 [Active*]
- IETF RFC 9156 [Active*]
- IETF RFC 9250 [Active*]