Encrypted DNS still tells an eavesdropper where to look

Encrypted DNS runs across much of the Internet. DNS over TLS, HTTPS, and QUIC keep the contents of a query away from anyone watching a network link. The encryption covers the message inside each packet. The packet still carries plaintext headers, and those values mark a flow as DNS. A new study measures this gap for the Internet of Things and offers a way to close part of it. The team studied an eavesdropper on … More

The post Encrypted DNS still tells an eavesdropper where to look appeared first on Help Net Security.