{"id":19756,"date":"2023-02-15T20:28:06","date_gmt":"2023-02-15T20:28:06","guid":{"rendered":"https:\/\/news.lacnic.net\/?p=19756"},"modified":"2023-02-15T20:39:38","modified_gmt":"2023-02-15T20:39:38","slug":"what-technologies-can-improve-dns-security","status":"publish","type":"post","link":"https:\/\/blog.lacnic.net\/en\/what-technologies-can-improve-dns-security\/","title":{"rendered":"What Technologies Can Improve DNS Security?"},"content":{"rendered":"\n

By Hugo Salgado<\/a>, Research and Development Engineer at NIC Chile, and Guillermo Cicileo<\/a>, Head of Internet Infrastructure Research and Development at LACNIC.<\/p>\n\n\n\n

In recent years we have observed a growing interest from the region’s technical community to introduce improvements to the privacy of the Domain Name System, particularly the encryption of queries and responses in the communication between clients and resolvers.<\/p>\n\n\n\n

Among the technologies that have emerged to improve DNS privacy – which were not available in its original architecture – are DoT (DNS over TLS), DoH (DNS over HTTPS), DoQ (DNS over QUIC) and other independent projects such as DNSCrypt and Oblivious DNS, each with their respective strengths and weaknesses.<\/p>\n\n\n\n

Specifically in the case of DoT, the technical community considers that it is the most natural evolution of DNS and that it is a free and already standardized technology.<\/p>\n\n\n\n

Last year, LACNIC conducted a study<\/a> to measure the use of DoT in resolvers in Latin America and the Caribbean by analyzing open data sources. Measuring the availability of DoT technology through resolvers allows us to visualize the region’s landscape for customers to start using DNS privacy.<\/p>\n\n\n\n

In addition to obtaining preliminary measurements, the objective was to perform the measurement during 2023 and thus to be able to verify the evolution of the use of encrypted DNS traffic.<\/p>\n\n\n\n

Firstly, we focused on three sources: a list of 33 public resolver services to study the possibility of sending DoT queries from clients in the region. Secondly, we gathered information from resolvers that allow classic DNS queries from anywhere on the Internet and attempted a DNS-over-TLS query on the same IP addresses as the normal DNS server. Finally, we used RIPE Atlas, a global, open, distributed Internet measurement platform that collects data produced by probes in different countries of the region and allows to send queries to resolvers in their internal networks. Through this measurement, we identified more than 300 active probes, which provided us with information.<\/p>\n\n\n\n

The first results of this study show a timid start to the use of DoT in Latin America and the Caribbean, with open resolvers offering DoT at a rate of 7.9% in IPv6, and 1.2% in IPv4.<\/p>\n\n\n\n

We also obtained between 3.5% and 13.3% of query failures of probes within the LAC region to known resolvers offering DoT. This may indicate that there are network obstacles that would prevent the service from reaching 100% of the customers.<\/p>\n\n\n\n

We concluded that it is already possible to detect the availability of the DoT service in our region, despite the newness of the technology and the limitations in obtaining data sources. Although currently there is a low adoption rate, we will be able to measure its evolution in the future thanks to this platform.<\/p>\n\n\n\n

We invite you to read the full article here<\/a>.<\/p>\n","protected":false},"excerpt":{"rendered":"

By Hugo Salgado, Research and Development Engineer at NIC Chile, and Guillermo Cicileo, Head of Internet Infrastructure Research and Development at LACNIC. In recent years we have observed a growing interest from the region’s technical community to introduce improvements to the privacy of the Domain Name System, particularly the encryption of queries and responses in […]<\/p>\n","protected":false},"author":6,"featured_media":19754,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"_jetpack_memberships_contains_paid_content":false,"footnotes":"","jetpack_publicize_message":"","jetpack_publicize_feature_enabled":true,"jetpack_social_post_already_shared":false,"jetpack_social_options":{"image_generator_settings":{"template":"highway","default_image_id":0,"font":"","enabled":false},"version":2}},"categories":[1321,503],"tags":[416,1289],"archivo":[1345],"taxonomy-authors":[1221,1239],"tipo_autor":[],"class_list":["post-19756","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-dns-en","category-research","tag-dns-en","tag-research","archivo-editions","taxonomy-authors-guillermo-cicileo-en","taxonomy-authors-hugo-salgado-en"],"acf":{"author":"","related_notes":[18747,16777]},"yoast_head":"\nLACNIC Blog | What Technologies Can Improve DNS Security?<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/blog.lacnic.net\/en\/what-technologies-can-improve-dns-security\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"LACNIC Blog | What Technologies Can Improve DNS Security?\" \/>\n<meta property=\"og:description\" content=\"By Hugo Salgado, Research and Development Engineer at NIC Chile, and Guillermo Cicileo, Head of Internet Infrastructure Research and Development at LACNIC. In recent years we have observed a growing interest from the region’s technical community to introduce improvements to the privacy of the Domain Name System, particularly the encryption of queries and responses in […]\" \/>\n<meta property=\"og:url\" content=\"https:\/\/blog.lacnic.net\/en\/what-technologies-can-improve-dns-security\/\" \/>\n<meta property=\"og:site_name\" content=\"LACNIC Blog\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/facebook.com\/lacnic\" \/>\n<meta property=\"article:published_time\" content=\"2023-02-15T20:28:06+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2023-02-15T20:39:38+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/blog.lacnic.net\/wp-content\/uploads\/2023\/02\/dns-conectividad-interconexion.png\" \/>\n\t<meta property=\"og:image:width\" content=\"680\" \/>\n\t<meta property=\"og:image:height\" content=\"330\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/png\" \/>\n<meta name=\"author\" content=\"Gianni\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@lacnic\" \/>\n<meta name=\"twitter:site\" content=\"@lacnic\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\/\/blog.lacnic.net\/en\/what-technologies-can-improve-dns-security\/#article\",\"isPartOf\":{\"@id\":\"https:\/\/blog.lacnic.net\/en\/what-technologies-can-improve-dns-security\/\"},\"author\":{\"name\":\"Gianni\",\"@id\":\"https:\/\/blog.lacnic.net\/#\/schema\/person\/1338d9cfdb0137e8bc5581f3771f39ab\"},\"headline\":\"What Technologies Can Improve DNS Security?\",\"datePublished\":\"2023-02-15T20:28:06+00:00\",\"dateModified\":\"2023-02-15T20:39:38+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/blog.lacnic.net\/en\/what-technologies-can-improve-dns-security\/\"},\"wordCount\":463,\"commentCount\":0,\"publisher\":{\"@id\":\"https:\/\/blog.lacnic.net\/#organization\"},\"image\":{\"@id\":\"https:\/\/blog.lacnic.net\/en\/what-technologies-can-improve-dns-security\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/blog.lacnic.net\/wp-content\/uploads\/2023\/02\/dns-conectividad-interconexion.png\",\"keywords\":[\"DNS\",\"Research\"],\"articleSection\":[\"DNS\",\"Research\"],\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\/\/blog.lacnic.net\/en\/what-technologies-can-improve-dns-security\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/blog.lacnic.net\/en\/what-technologies-can-improve-dns-security\/\",\"url\":\"https:\/\/blog.lacnic.net\/en\/what-technologies-can-improve-dns-security\/\",\"name\":\"LACNIC Blog | What Technologies Can Improve DNS Security?\",\"isPartOf\":{\"@id\":\"https:\/\/blog.lacnic.net\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/blog.lacnic.net\/en\/what-technologies-can-improve-dns-security\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/blog.lacnic.net\/en\/what-technologies-can-improve-dns-security\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/blog.lacnic.net\/wp-content\/uploads\/2023\/02\/dns-conectividad-interconexion.png\",\"datePublished\":\"2023-02-15T20:28:06+00:00\",\"dateModified\":\"2023-02-15T20:39:38+00:00\",\"breadcrumb\":{\"@id\":\"https:\/\/blog.lacnic.net\/en\/what-technologies-can-improve-dns-security\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/blog.lacnic.net\/en\/what-technologies-can-improve-dns-security\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/blog.lacnic.net\/en\/what-technologies-can-improve-dns-security\/#primaryimage\",\"url\":\"https:\/\/blog.lacnic.net\/wp-content\/uploads\/2023\/02\/dns-conectividad-interconexion.png\",\"contentUrl\":\"https:\/\/blog.lacnic.net\/wp-content\/uploads\/2023\/02\/dns-conectividad-interconexion.png\",\"width\":680,\"height\":330},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/blog.lacnic.net\/en\/what-technologies-can-improve-dns-security\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Portada\",\"item\":\"https:\/\/blog.lacnic.net\/en\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"What Technologies Can Improve DNS Security?\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/blog.lacnic.net\/#website\",\"url\":\"https:\/\/blog.lacnic.net\/\",\"name\":\"LACNIC Blog\",\"description\":\"En el Blog de LACNIC encontrar\u00e1s art\u00edculos t\u00e9cnicos vinculados al desarrollo de Internet en la regi\u00f3n de Am\u00e9rica Latina y el Caribe.\",\"publisher\":{\"@id\":\"https:\/\/blog.lacnic.net\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/blog.lacnic.net\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\/\/blog.lacnic.net\/#organization\",\"name\":\"LACNIC Blog\",\"url\":\"https:\/\/blog.lacnic.net\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/blog.lacnic.net\/#\/schema\/logo\/image\/\",\"url\":\"https:\/\/blog.lacnic.net\/wp-content\/uploads\/2023\/03\/lacnic-blog.svg\",\"contentUrl\":\"https:\/\/blog.lacnic.net\/wp-content\/uploads\/2023\/03\/lacnic-blog.svg\",\"caption\":\"LACNIC Blog\"},\"image\":{\"@id\":\"https:\/\/blog.lacnic.net\/#\/schema\/logo\/image\/\"},\"sameAs\":[\"https:\/\/facebook.com\/lacnic\",\"https:\/\/x.com\/lacnic\",\"https:\/\/www.instagram.com\/lacnic\/?hl=es-la\",\"https:\/\/uy.linkedin.com\/company\/lacnic\",\"https:\/\/www.youtube.com\/user\/lacnicstaff\",\"https:\/\/www.lacnic.net\/podcast\"]},{\"@type\":\"Person\",\"@id\":\"https:\/\/blog.lacnic.net\/#\/schema\/person\/1338d9cfdb0137e8bc5581f3771f39ab\",\"name\":\"Gianni\",\"url\":\"https:\/\/blog.lacnic.net\/en\/author\/gianni\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"LACNIC Blog | What Technologies Can Improve DNS Security?","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/blog.lacnic.net\/en\/what-technologies-can-improve-dns-security\/","og_locale":"en_US","og_type":"article","og_title":"LACNIC Blog | What Technologies Can Improve DNS Security?","og_description":"By Hugo Salgado, Research and Development Engineer at NIC Chile, and Guillermo Cicileo, Head of Internet Infrastructure Research and Development at LACNIC. In recent years we have observed a growing interest from the region’s technical community to introduce improvements to the privacy of the Domain Name System, particularly the encryption of queries and responses in […]","og_url":"https:\/\/blog.lacnic.net\/en\/what-technologies-can-improve-dns-security\/","og_site_name":"LACNIC Blog","article_publisher":"https:\/\/facebook.com\/lacnic","article_published_time":"2023-02-15T20:28:06+00:00","article_modified_time":"2023-02-15T20:39:38+00:00","og_image":[{"width":680,"height":330,"url":"https:\/\/blog.lacnic.net\/wp-content\/uploads\/2023\/02\/dns-conectividad-interconexion.png","type":"image\/png"}],"author":"Gianni","twitter_card":"summary_large_image","twitter_creator":"@lacnic","twitter_site":"@lacnic","schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/blog.lacnic.net\/en\/what-technologies-can-improve-dns-security\/#article","isPartOf":{"@id":"https:\/\/blog.lacnic.net\/en\/what-technologies-can-improve-dns-security\/"},"author":{"name":"Gianni","@id":"https:\/\/blog.lacnic.net\/#\/schema\/person\/1338d9cfdb0137e8bc5581f3771f39ab"},"headline":"What Technologies Can Improve DNS Security?","datePublished":"2023-02-15T20:28:06+00:00","dateModified":"2023-02-15T20:39:38+00:00","mainEntityOfPage":{"@id":"https:\/\/blog.lacnic.net\/en\/what-technologies-can-improve-dns-security\/"},"wordCount":463,"commentCount":0,"publisher":{"@id":"https:\/\/blog.lacnic.net\/#organization"},"image":{"@id":"https:\/\/blog.lacnic.net\/en\/what-technologies-can-improve-dns-security\/#primaryimage"},"thumbnailUrl":"https:\/\/blog.lacnic.net\/wp-content\/uploads\/2023\/02\/dns-conectividad-interconexion.png","keywords":["DNS","Research"],"articleSection":["DNS","Research"],"inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/blog.lacnic.net\/en\/what-technologies-can-improve-dns-security\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/blog.lacnic.net\/en\/what-technologies-can-improve-dns-security\/","url":"https:\/\/blog.lacnic.net\/en\/what-technologies-can-improve-dns-security\/","name":"LACNIC Blog | What Technologies Can Improve DNS Security?","isPartOf":{"@id":"https:\/\/blog.lacnic.net\/#website"},"primaryImageOfPage":{"@id":"https:\/\/blog.lacnic.net\/en\/what-technologies-can-improve-dns-security\/#primaryimage"},"image":{"@id":"https:\/\/blog.lacnic.net\/en\/what-technologies-can-improve-dns-security\/#primaryimage"},"thumbnailUrl":"https:\/\/blog.lacnic.net\/wp-content\/uploads\/2023\/02\/dns-conectividad-interconexion.png","datePublished":"2023-02-15T20:28:06+00:00","dateModified":"2023-02-15T20:39:38+00:00","breadcrumb":{"@id":"https:\/\/blog.lacnic.net\/en\/what-technologies-can-improve-dns-security\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/blog.lacnic.net\/en\/what-technologies-can-improve-dns-security\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/blog.lacnic.net\/en\/what-technologies-can-improve-dns-security\/#primaryimage","url":"https:\/\/blog.lacnic.net\/wp-content\/uploads\/2023\/02\/dns-conectividad-interconexion.png","contentUrl":"https:\/\/blog.lacnic.net\/wp-content\/uploads\/2023\/02\/dns-conectividad-interconexion.png","width":680,"height":330},{"@type":"BreadcrumbList","@id":"https:\/\/blog.lacnic.net\/en\/what-technologies-can-improve-dns-security\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Portada","item":"https:\/\/blog.lacnic.net\/en\/"},{"@type":"ListItem","position":2,"name":"What Technologies Can Improve DNS Security?"}]},{"@type":"WebSite","@id":"https:\/\/blog.lacnic.net\/#website","url":"https:\/\/blog.lacnic.net\/","name":"LACNIC Blog","description":"En el Blog de LACNIC encontrar\u00e1s art\u00edculos t\u00e9cnicos vinculados al desarrollo de Internet en la regi\u00f3n de Am\u00e9rica Latina y el Caribe.","publisher":{"@id":"https:\/\/blog.lacnic.net\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/blog.lacnic.net\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/blog.lacnic.net\/#organization","name":"LACNIC Blog","url":"https:\/\/blog.lacnic.net\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/blog.lacnic.net\/#\/schema\/logo\/image\/","url":"https:\/\/blog.lacnic.net\/wp-content\/uploads\/2023\/03\/lacnic-blog.svg","contentUrl":"https:\/\/blog.lacnic.net\/wp-content\/uploads\/2023\/03\/lacnic-blog.svg","caption":"LACNIC Blog"},"image":{"@id":"https:\/\/blog.lacnic.net\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/facebook.com\/lacnic","https:\/\/x.com\/lacnic","https:\/\/www.instagram.com\/lacnic\/?hl=es-la","https:\/\/uy.linkedin.com\/company\/lacnic","https:\/\/www.youtube.com\/user\/lacnicstaff","https:\/\/www.lacnic.net\/podcast"]},{"@type":"Person","@id":"https:\/\/blog.lacnic.net\/#\/schema\/person\/1338d9cfdb0137e8bc5581f3771f39ab","name":"Gianni","url":"https:\/\/blog.lacnic.net\/en\/author\/gianni\/"}]}},"jetpack_publicize_connections":[],"jetpack_featured_media_url":"https:\/\/blog.lacnic.net\/wp-content\/uploads\/2023\/02\/dns-conectividad-interconexion.png","jetpack_sharing_enabled":true,"wpml_current_locale":"en_US","wpml_translations":[{"locale":"es_ES","id":19751,"post_title":"\u00bfQu\u00e9 tecnolog\u00edas pueden mejorar la seguridad del DNS? \u00a0","slug":"que-tecnologias-pueden-mejorar-la-seguridad-del-dns","href":"https:\/\/blog.lacnic.net\/que-tecnologias-pueden-mejorar-la-seguridad-del-dns\/"},{"locale":"pt_BR","id":19758,"post_title":"Quais tecnologias podem melhorar a seguran\u00e7a do DNS?","slug":"quais-tecnologias-podem-melhorar-a-seguranca-do-dns","href":"https:\/\/blog.lacnic.net\/pt-br\/quais-tecnologias-podem-melhorar-a-seguranca-do-dns\/"}],"_links":{"self":[{"href":"https:\/\/blog.lacnic.net\/en\/wp-json\/wp\/v2\/posts\/19756","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/blog.lacnic.net\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/blog.lacnic.net\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/blog.lacnic.net\/en\/wp-json\/wp\/v2\/users\/6"}],"replies":[{"embeddable":true,"href":"https:\/\/blog.lacnic.net\/en\/wp-json\/wp\/v2\/comments?post=19756"}],"version-history":[{"count":3,"href":"https:\/\/blog.lacnic.net\/en\/wp-json\/wp\/v2\/posts\/19756\/revisions"}],"predecessor-version":[{"id":19768,"href":"https:\/\/blog.lacnic.net\/en\/wp-json\/wp\/v2\/posts\/19756\/revisions\/19768"}],"acf:post":[{"embeddable":true,"href":"https:\/\/blog.lacnic.net\/en\/wp-json\/wp\/v2\/posts\/16777"},{"embeddable":true,"href":"https:\/\/blog.lacnic.net\/en\/wp-json\/wp\/v2\/posts\/18747"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/blog.lacnic.net\/en\/wp-json\/wp\/v2\/media\/19754"}],"wp:attachment":[{"href":"https:\/\/blog.lacnic.net\/en\/wp-json\/wp\/v2\/media?parent=19756"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/blog.lacnic.net\/en\/wp-json\/wp\/v2\/categories?post=19756"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/blog.lacnic.net\/en\/wp-json\/wp\/v2\/tags?post=19756"},{"taxonomy":"archivo","embeddable":true,"href":"https:\/\/blog.lacnic.net\/en\/wp-json\/wp\/v2\/archivo?post=19756"},{"taxonomy":"taxonomy-authors","embeddable":true,"href":"https:\/\/blog.lacnic.net\/en\/wp-json\/wp\/v2\/taxonomy-authors?post=19756"},{"taxonomy":"tipo_autor","embeddable":true,"href":"https:\/\/blog.lacnic.net\/en\/wp-json\/wp\/v2\/tipo_autor?post=19756"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}