eco – Association of the Internet Industry
&
CENTR – Council of European National Top-Level Domain Registries

invite you to a

DNS over HTTPS Technical Webinar

Encrypted DNS via "DNS-over-HTTPS" and "DNS-over-TLS" are important extensions of the DNS protocol. These new extensions are controversially discussed, but every operator of DNS resolver services should consider whether DoH and DoT could be sensibly offered for these services. In September eco has published a discussion paper on this topic including recommendations for operators of DNS services.

In this workshop we will show how the DNS Loadbalancer PowerDNS "dnsdist" can be used to extend any existing DNS resolver (BIND 9, Unbound, PowerDNS Recursor, Microsoft DNS etc.) with DoH and DoT. Existing DNS security mechanisms such as Response Policy Zones will be preserved.

Best practices for the operation of DNS resolvers with DoH and DoT (e.g. EDNS Client Subnet) will be discussed and CENTR will present current practical implementation and research efforts from its current DoH Resolver project.

After the workshop participants will be familiar with the basics of DoH and DoT, and the implementation by means of "dnsdist".