Re: [Doh] New Privacy Considerations Section Proposal

[Howard Chu <[e-mail]>]

Howard Chu wrote:
> Daniel Stenberg wrote:
>> On Thu, 21 Jun 2018, Howard Chu wrote:
>>
>>> that particular DNS/DoH server is unlikely to be serving any interesting 
>>> web pages for any clients. As such, the frequency of intermingled 
>>> connections should be low-to-zero.
>>
>> That's a rather pessimistic view of the DoH future.
> 
> It's a realistic view of devices coming preconfigured to use e.g. Google's DNS 
> servers.
> 
>> I think it is likely that some DoH server operators will be companies with 
>> distributed presence so that they can offer proximity to users; CDNs and the 
>> likes. CDNs also host web sites. They should thus be perfect candidates for 
>> serving both web content and DoH requests over the same connections. 
>> Especially in combination with the ORIGIN frame etc.
> 
> Those companies may indeed arise, but the vast majority of users will never 
> change their default DNS settings to point to them.

An additional point - it's been easy enough to launch DDoS attacks against 
dedicated DNS infrastructure in the past. If you combine DNS traffic and real 
HTTP traffic in the same server, it will become even easier to overload these 
servers and knock out DNS service.

-- 
   -- Howard Chu
   CTO, Symas Corp.           http://www.symas.com
   Director, Highland Sun     http://highlandsun.com/hyc/
   Chief Architect, OpenLDAP  http://www.openldap.org/project/