Securi-Tay 2020: DOH! Bypassing DNS-over-HTTPS - Sean Wright
Talk Description:
DNS requests are submitted over an unencrypted channel. This has potential security and privacy related concerns associated with it. As a result new technologies such as DNS-over-HTTPS attempt to address some of these shortcomings. DOH has started gaining some popularity, especially since it has now been baked into popular web browsers such as Chrome and Firefox.
The purpose of this talk is to highlight some of the shortcomings of this technology, as well as illustrate so scenarios where it still fails to provide privacy.
About Sean Wright:
Lead Software Security Engineer and OWASP chapter leader, with special interest in web based security as well as TLS security.