Privacy Preserved Achievement Method for OCSP Status and Supported Protocols in Full-DoH Architecture

Currently, efforts to protect privacy information through encrypted DNS communications are becoming increasingly active. The encryption of DNS, standardized by the IETF, predominantly uses TLS. However, the use of TLS for encrypting DNS communications results in the leakage of privacy information du...

Full description

Saved in:
Bibliographic Details
Published in:2024 IEEE 48th Annual Computers, Software, and Applications Conference (COMPSAC) pp. 1554 - 1555
Main Authors: Sunahara, Satoru, Jin, Yong, Iida, Katsuyoshi, Yamai, Nariyoshi, Takai, Yoshiaki
Format: Conference Proceeding
Language:English
Published: IEEE 02-07-2024
Subjects:
Online Access:Get full text
Tags: Add Tag
No Tags, Be the first to tag this record!
Description
Summary:Currently, efforts to protect privacy information through encrypted DNS communications are becoming increasingly active. The encryption of DNS, standardized by the IETF, predominantly uses TLS. However, the use of TLS for encrypting DNS communications results in the leakage of privacy information during the certificate revocation process. This paper proposes a new method for certificate revocation verification in encrypted DNS communications, presents a way to enhance the protection of privacy information, and outlines a research plan for further investigation.
ISSN:2836-3795
DOI:10.1109/COMPSAC61105.2024.00235