An Insight into Encrypted DNS protocol: DNS over TLS

Domain Name Service (DNS) is one of the predominant protocols in network and communication. In the current implementation, a DNS query and response precedes the connection between any two hosts on the internet. This protocol translates the domain name in plain text to an IP address. A critical privacy breach arises here due to the plain text DNS query. In the recent years, encrypted DNS protocols mainly DNS over HTTPS (DoH) and DNS over TLS (DoT) have surfaced. This paper provides an insight into the DoT protocol and its session establishment according to the RFC. Furthermore, we have brought out the differences between various encrypted DNS protocols. In addition to this we highlight the privacy and information leakage associated with DoT protocol and how despite encryption, there is a necessity for thorough analysis of the threats to privacy which should be examined and rectified.