登录查看更多内容

What are the potential drawbacks of using DNS over HTTPS (DoH)?

由人工智能和领英社区提供技术支持

DNS over HTTPS (DoH) is a protocol that encrypts DNS queries and responses, making them more secure and private. However, it also has some potential drawbacks that you should be aware of before adopting it. In this article, we will discuss some of the main challenges and limitations of using DoH in your computer network.

此文章中的业界达人

由社区从 6 条内容中精选。了解更多

Md Zishan Firoz

SOC ?? |SIEM, IDS/IPS, Firewall , VAPT | C3SA | Content Writer ??

1 Compatibility issues

DoH is not widely supported by all devices, applications, and servers. This means that you may encounter compatibility problems when trying to use DoH with some of your existing network infrastructure or services. For example, some firewalls, routers, or proxies may not be able to handle DoH traffic, or may require additional configuration to do so. Additionally, some applications may not be able to use DoH natively, and may rely on the system's DNS settings or third-party extensions to enable it.

添加您的观点

Clifford Edewor

??? Cybersecurity Analyst | Network Security | PCI-DSS Compliance | Threat Intelligence | Committed to Cyber Risk Mitigation | Inspiring a Safe & Secure Digital World ???
举报内容
Some network configurations and devices may not fully support DoH, leading to compatibility challenges. For example, in enterprise environments or on certain IoT devices, DoH may face hurdles in seamless integration. Ensuring broad compatibility across diverse systems becomes crucial to prevent disruptions.

已翻译

赞

2 Performance impact

DoH adds an extra layer of encryption and decryption to the DNS process, which may affect the performance and latency of your network. DoH also uses HTTPS, which is a heavier protocol than the traditional UDP or TCP used by DNS. HTTPS requires more bandwidth, CPU, and memory resources, and may introduce more overhead and complexity to the network. Furthermore, DoH may not always use the optimal or closest DNS server for your queries, depending on the DoH provider you choose. This may result in slower or less accurate responses, especially if you are using a global or public DoH service.

添加您的观点

Clifford Edewor

??? Cybersecurity Analyst | Network Security | PCI-DSS Compliance | Threat Intelligence | Committed to Cyber Risk Mitigation | Inspiring a Safe & Secure Digital World ???
举报内容
While DoH enhances privacy by encrypting DNS queries, it may introduce a slight performance overhead. The additional encryption and decryption processes can marginally increase latency, impacting the overall speed of DNS resolution. Organizations need to weigh the privacy benefits against potential performance considerations.

已翻译

赞

3 Policy and compliance risks

DoH may also pose some policy and compliance risks for your network, depending on the legal and regulatory environment you operate in. DoH can bypass or interfere with some of the network policies and controls that you may have in place, such as filtering, logging, or auditing. For example, DoH can prevent you from blocking or redirecting malicious or unwanted domains, or from monitoring or analyzing the DNS traffic on your network. Additionally, DoH can expose you to the privacy and security policies of the DoH provider you use, which may not align with your own or with the laws of your jurisdiction. For instance, some DoH providers may collect, store, or share your DNS data with third parties, or may be subject to government requests or censorship.

添加您的观点

Clifford Edewor

??? Cybersecurity Analyst | Network Security | PCI-DSS Compliance | Threat Intelligence | Committed to Cyber Risk Mitigation | Inspiring a Safe & Secure Digital World ???
举报内容
DoH may pose challenges for organizations aiming to enforce content filtering or monitoring policies. The encrypted nature of DoH prevents traditional DNS-based filtering methods, potentially creating compliance issues. This becomes particularly relevant in sectors where regulatory compliance is paramount, such as education or healthcare.

已翻译

赞

4 Complexity and troubleshooting

DoH can also increase the complexity and difficulty of troubleshooting your network issues. DoH can obscure or mask some of the DNS errors or anomalies that you may encounter, making it harder to diagnose and resolve them. For example, DoH can hide the source or destination of the DNS queries and responses, or the actual DNS server that is being used. DoH can also interfere with some of the tools or methods that you may use to test or debug your DNS settings or performance, such as ping, traceroute, or dig. Moreover, DoH can create some conflicts or inconsistencies with other DNS protocols or features that you may use, such as DNSSEC, DNS over TLS (DoT), or split-horizon DNS.

添加您的观点

Md Zishan Firoz

SOC ?? |SIEM, IDS/IPS, Firewall , VAPT | C3SA | Content Writer ??
举报内容
One potential drawback of using DNS over HTTPS (DOH) is the increased complexity it introduces to network configurations and troubleshooting. Since DOH encrypts DNS queries within HTTPS, traditional DNS monitoring tools may not be able to inspect or analyze the traffic effectively, complicating network management and diagnostics. Additionally, resolving issues related to DOH configurations or compatibility with existing infrastructure can require specialized knowledge and tools, posing challenges for administrators and users alike.

已翻译

赞
Clifford Edewor

??? Cybersecurity Analyst | Network Security | PCI-DSS Compliance | Threat Intelligence | Committed to Cyber Risk Mitigation | Inspiring a Safe & Secure Digital World ???
举报内容
The introduction of DoH adds complexity to network management and troubleshooting. Identifying and resolving DNS-related issues can become more challenging when DNS queries are encrypted. Network administrators may need to adapt their tools and methodologies to diagnose and address problems effectively.

已翻译

赞

5 Education and awareness

DoH can also require some education and awareness from your network users and administrators. DoH can change the way that DNS works and behaves on your network, and may introduce some new concepts or challenges that you may not be familiar with. For example, DoH can affect the visibility and control of your DNS traffic, and may require you to adjust or update your network policies and configurations accordingly. DoH can also affect the choice and trust of your DNS provider, and may require you to evaluate and compare different DoH services and options. Furthermore, DoH can affect the security and privacy of your DNS data, and may require you to understand and manage the risks and benefits of using DoH.

添加您的观点

Clifford Edewor

??? Cybersecurity Analyst | Network Security | PCI-DSS Compliance | Threat Intelligence | Committed to Cyber Risk Mitigation | Inspiring a Safe & Secure Digital World ???
举报内容
End-users and administrators alike may not fully understand the implications of DoH adoption. Lack of awareness can lead to misconceptions or misconfigurations. It's essential to educate both users and IT staff about the benefits, drawbacks, and proper implementation of DoH to ensure a smooth transition...

已翻译

赞

6 Here’s what else to consider

This is a space to share examples, stories, or insights that don’t fit into any of the previous sections. What else would you like to add?

添加您的观点

Computer Networking

+ 关注

给文章评分

我们借助人工智能创建了此文章。您认为这篇文章怎么样？

很棒不太好

举报此文章

查看全部

What are the potential drawbacks of using DNS over HTTPS (DoH)?

1

2

3

4

5

6

1 Compatibility issues

2 Performance impact

3 Policy and compliance risks

4 Complexity and troubleshooting

5 Education and awareness

6 Here’s what else to consider

Computer Networking

给文章评分

感谢您的反馈

更多Computer Networking相关文章

更多相关阅读内容

What are the potential drawbacks of using DNS over HTTPS (DoH)?

1

2

3

4

5

6

1 Compatibility issues

2 Performance impact

3 Policy and compliance risks

4 Complexity and troubleshooting

5 Education and awareness

6 Here’s what else to consider

Computer Networking

给文章评分

感谢您的反馈

查看其他技能