Encrypting your DNS enhances the security of your browsing activities by safeguarding against behavioral profiling and tracking. In modern encrypted DNS, two primary QUIC-based protocols are available: DNS-over-QUIC (DoQ) and DNS-over-HTTP/3 (DoH/3).
While both protocols aim to provide privacy without significantly affecting performance, which one should you choose? Our PAM paper, which was accepted today, seeks to address this question. This paper is the result of the master’s thesis work of Philipp Bielefeld and Steffen Sasalla
We conducted a comprehensive scan of >3k encrypted DNS resolvers to evaluate the technical maturity of both protocols by assessing their support for performance-enhancing features, such as session resumption and 0-RTT support. Additionally, by measuring >1 million websites against these resolvers, we quantify the minimal performance impact and the effect of website complexity on webpage loading times when using encrypted DNS.
https://pam2026.at/program