Among them are DNS over HTTP and DNSCrypt, which all protect data by carrying it within an encrypted layer. Because it was built to function in the most performance-friendly way possible, the design neglected any form of protection for the data it possesses, and this critical shortcoming has never been rectified.ĭNS privacy has become an increasing concern among the security world as of late, resulting in the emergence of several methods of encrypting DNS traffic. As critical as the DNS is to the function of the internet, its design has remained firmly entrenched within the past. It translates hyperlinks and URLs provided by the end user into IP addresses using a series of servers that act in a branching tree formation. The Domain Name System (DNS) is one of the cornerstones of the modern day internet. I then used the data to do a cost-benefit analysis on using encrypted DNS traffic. A parser script was written to extract the relevant metrics from the har files to analyze.

The tests produced har files with response time recorded for each website. I tested the top 1000 websites on the Alexa list ( ) using various DNS encryption schemes: DNSCrypt, DNS over HTTPS, and no encryption, using a Selenium script.

In this paper, a systematic study was performed to understand the impact of different encryption formats on DNS time and total latency.

Opendns dnscrypt