Panel: DNS Privacy Vs.
summary
Private DNS deployments (DoT, DoH, DoQ, Oblivious DoH) actually change who sees IPs and queries: Apple ships ODoH in iCloud Private Relay so proxies and resolvers split knowledge, Cloudflare and Google become dominant resolvers, and DoT on port 853 is trivially blockable while DoH mixes with HTTP and is harder to censor. Consequences noted: broken measurement tools, harder spam/malware detection, compatibility failures for accessibility add‑ons, and documented censoring or shutdown responses in places like Iran and China.
AI-written summary · about
chapters (12)
- 0:00Introduction
- 1:17DNS privacy protocols
- 7:56Public interest tensions
- 13:13Consolidation risks
- 18:29DNS privacy vs censorship
- 25:05Rollout strategies
- 32:10Security trade-offs
- 37:06ISP adoption tracking
- 40:37Oblivious DoH proxy
- 41:19Default resolvers role
- 43:05iCloud Private Relay impact
- 45:00Closing & Q&A
related talks
01h 42mIt’s DNS, Jim, but not as we know it
11mPadding Ain't Enough: Assessing the Privacy Guarantees of Encrypted DNS
20mWho Is Answering My Queries: Understanding and Characterizing Interception of the DNS Resolution Path
09mDNS is the entry point for every application on the internet
25mProtective DNS, DNS Encryption, & Zero-Trust: Tackling NSA Guidance
45mInside Hotel California
28mDarwin & Protocols
01h 14mInternet architecture & human rights