Re: [Resolverless-dns] Paper on Resolver-less DNS

[Erik Sy <[e-mail]>]

Hi Ralf,

On 8/17/19 23:13, Ralf Weber wrote
> The majority of DNS resolvers for end users are still run by ISPs and
> Telcos. In that paper you reference the only company that can be seen
> as an ISP is Level3, although there resolver in contrast to mosts ISPs
> is open. The other are the usual open resolver vendors. So this paper
> clearly misses a large part of the resolver population.
>
> And my experiences with ISPs and Telkos is that they are, probably
> because most of them are regulated very sensitive to privacy and
> data analysis for marketing and advertising. A lot of them do or
> let others do analytics on their data, mostly after being anonymised,
> for security purposes, but not more.

Nonetheless, there exists empirical evidence that several popular ISPs
and Telcos sold data on their customers' online activities to
advertising companies [1,2,3]. Thus, it is plausible that these ISPs and
Telcos use their DNS resolver to aggregate such user profiles. Note,
that features such as Encrypted Server Name Indication (ESNI) for TLS
will make the aggregation of such user data based on the analysis of
network traffic more difficult. Thus, for ISPs aiming to monitor the
users' online activities, the DNS resolver may become an increasingly
important source of such user data.

Erik

1:
http://transition.fcc.gov/Daily_Releases/Daily_Business/2014/db0903/DOC-329127A1.pdf

2:
https://www.ftc.gov/system/files/documents/public_comments/2015/09/00008-97486.pdf

3:
http://citeseerx.ist.psu.edu/viewdoc/download?doi=10.1.1.700.4721&rep=rep1&type=pdf