A number of groups, such as Mozilla, are working on developing this technology further, though current explorations are somewhat limited, with only one study detailing the impacts of DNS over TLS and HTTPS on performance as of this writing. However, with added security comes increasing performance costs, and due to the relatively new nature of these protocols, there is no native support for these protocols in any operating system. Among them are DNS over HTTP and DNSCrypt, which all protect data by carrying it within an encrypted layer. Because it was built to function in the most performance-friendly way possible, the design neglected any form of protection for the data it possesses, and this critical shortcoming has never been rectified.ĭNS privacy has become an increasing concern among the security world as of late, resulting in the emergence of several methods of encrypting DNS traffic. As critical as the DNS is to the function of the internet, its design has remained firmly entrenched within the past. It translates hyperlinks and URLs provided by the end user into IP addresses using a series of servers that act in a branching tree formation. The Domain Name System (DNS) is one of the cornerstones of the modern day internet. I then used the data to do a cost-benefit analysis on using encrypted DNS traffic. A parser script was written to extract the relevant metrics from the har files to analyze. The tests produced har files with response time recorded for each website. I tested the top 1000 websites on the Alexa list ( ) using various DNS encryption schemes: DNSCrypt, DNS over HTTPS, and no encryption, using a Selenium script.

In this paper, a systematic study was performed to understand the impact of different encryption formats on DNS time and total latency.

List of opendns dnscrypt