0x16 DNS Security

Beschreibung:

Domain Name System (DNS) ist schon über 30 Jahre alt und bildet
das Rückgrat des Internets. In dieser Folge unterhalten wir uns
über die Sicherheit von DNS, welche Angriffe es auf DNS gibt und
wie man es sicherer machen kann.
Shownotes:

Pi-hole: Network-wide Ad Blocking

DNS over HTTPS and DNS over TLS - Guides - Mullvad VPN

Improving DNS Privacy with Oblivious DoH in 1.1.1.1

BCP38

Oblivious DNS over HTTPS (ODoH): A Practical Privacy
Enhancement to DNS

Oblivious DNS Over HTTPS

ODNS: Oblivious DNS

Hybrid Public Key Encryption

GitHub: cloudflare/odoh-client-rs

GitHub: cloudflare/odoh-client-go

Reflections on reflection (attacks)

DNS over TLS vs. DNS over HTTPS

Man et. al: DNS Cache Poisoning Attack Reloaded (ACM CCS)

SAD DNS

Dan Kaminsky: It’s the end of the cache as we know it

AlterNIC - Wikipedia

DNS flag day 2020

SAD DNS Explained

DNS Privacy Requirements

How DNSSEC works

NSEC3 Resource Record – Wikipedia

DNSCrypt - List of public DoH and DNSCrypt servers

Private Network Access (CORS-RFC1918) updates - Chrome
Developers

RFC5452: Measures for Making DNS More Resilient against
Forged Answers

Forgot password? Taking over user accounts Kaminsky style