Fediversity/fediversity_website_archive
Archived
6
0
Fork 0
forked from laurens/fediversity_website
Code Pull requests Activity
This repository has been archived on 2024-10-15. You can view files and clone it, but cannot push or open issues or pull requests.
fediversity_website_archive/content/evenementen/nluug/voorjaarsconferentie-2019/talks/bert-hubert-dns-and-tls-sni-now-with-encryption-and-cloud.md
Patrick Reijnen b18f3190c4 Updates en toevoeging van keynote 2019VJ
2023-07-29 14:40:26 +02:00

1.4 KiB
Raw Blame History

categories date description layout tags title speakers presentation recording
presentaties
2019-05-23T10:31:43+02:00 Een presentatie gegeven door Bert Hubert over DNS en TLS SNI zoals het gebruik van DNS over TLS (DoT) en DNS over HTTPS (DoH). event-talk
dns
doh
dot
tls
Bert Hubert - DNS & TLS SNI: Now with encryption... and cloud
bert-hubert
filename
2019-05-23-bert-hubert-dns-and-tls-sni-now-with-encryption-and-cloud.pdf
platform url
youtube https://www.youtube.com/watch?v=V2F92orIEO8

Abstract

DNS is one of the few remaining (generally) unencrypted parts of our daily network use. In addition, TLS sessions (even TLS 1.3) transfer the name of the server visited in plaintext ("SNI"). 2018 saw the release of technologies to encrypt both of these privacy leaks, which is good. Less good however is that with this encryption, your DNS (and TLS SNI) lookups will move to the cloud.

In this talk, I explain the technologies used (DNS over TLS and DNS over HTTPS), but also spend time on what this change means: loss of control over your lookups (forget about your intranet), and how encrypting your data to a cloud provider may provide security against your network admin & government, but does send all your browsing behaviour to California.

Biografie

Bert is the founder of PowerDNS. These days he also cares a lot about keeping the internet open. In addition, he can't help document or explain open technologies.