The War for Control of DNS Encryption | Paul Vixie | WWHF Deadwood 2020 Virtual
Keynote - The War for Control of DNS Encryption
00:00 - Intro to Dr. Paul Vixie
01:57 - War for Control of DNS Encryption
02:42 - Abstract
03:37 - Technology Lock-In
10:25 - Role of Surveillance
12:21 - Domains of Operations
16:56 - Platform Inversion
20:53 - Coopting Sea-Change
24:25 - Nothing Which Can Be Abused Won’t Be
27:09 - Disintermediation For Better Identification
29:26 - Something Specific: DNS over HTTPS (DoH)
32:54 - HTTP/3 (Uses UDP)
36:51 - DNS System Architecture (Traditional)
38:07 - DNS System Architecture, As Amended
39:37 - Problems with DoH
40:51 - Avoiding Collateral Damage
44:28 - Expensive (Imposed) Choices
47:09 - Conclusion
Join the WWHF Discord Community – / discord
Pervasive monitoring of the Internet by both government, corporate, and criminal actors has triggered an encryption wavefront as wide as the Internet itself. DNS, as the map of the Internet's territory, is seen as especially sensitive and there are now several competing encryption standards waiting to be deployed. In this short talk, Dr. Vixie will explain the original problem, describe the protocol-level solutions, and then show how vendors like Google, Mozilla Corporation, Microsoft, and Apple are deploying these technologies across their product lines. Opinions may also be offered.
Dr. Paul Vixie is an Internet pioneer. Currently, he is the Chairman, Chief Executive Officer, and co-founder of award-winning Farsight Security, Inc. He was inducted into the Internet Hall of Fame in 2014 for work related to DNS. Dr. Vixie is a prolific author of open-source Internet software including BIND, and of many Internet standards documents concerning DNS and DNSSEC. In addition, he founded the first anti-spam company (MAPS, 1996), the first non-profit Internet infrastructure software company (ISC, 1994), and the first neutral and commercial Internet exchange (PAIX, 1991).
Dr. Vixie served on the ARIN Board of Trustees from 2005 to 2013, as ARIN Chairman in 2008 and 2009, and was a founding member of ICANN Root Server System Advisory Committee (RSSAC) and ICANN Security and Stability Advisory Committee (SSAC). He operated the ISC's F-Root name server for many years and is a member of Cogent's C-Root team. Dr. Vixie is a sysadmin for Op-Sec-Trust. He earned his Ph.D. from Keio University for work related to DNS and DNSSEC in 2010. Dr. Vixie delivers keynote presentations at conferences around the world. Most recently, he spoke at RSA USA 2020
DNS Wars: Episode IV A New Bypass
• Keynote: DNS Wars: Episode IV A New...
Paul Vixie talks about DNS over HTTPS
• Paul Vixie talks about DNS over HTTPS