DNS – Strategies for Reducing Data Leakage & Protecting Online Privacy
This talk examines how DNS works and looks at a few ways in which DNS can be exploited. We will review the state of DNS security from an end user perspective and will examine ways in which you can effectively limit the disclosure of your online habits through securing the way your local DNS resolvers work. We will also discuss common ways in which DNS data is being tracked and monitored, often without our knowledge. We will then lay out a foundational approach for building a DNS solution that can be used to both insure the accuracy and authenticity of DNS request results while protecting DNS data leaving our devices & networks from prying eyes. We will examine ways to baseline existing DNS traffic using a variety of simple tools including Wireshark, Packetbeat and Graylog. We will then review some of the newer strategies available for securing DNS traffic and use some of those solutions to implement and monitor an easy to use DNS privacy solution that would completely hide all DNS data by TLS encrypting all DNS traffic and tightly controlling where and how that data becomes unencrypted on the Internet using VPN tunneling and Tor routed requests. The ultimate goal would be the of a DNS system that completely controls all DNS traffic entering or exiting a network and provides assurance that you can be in complete control of who can see that data.