1. 02 Feb, 2018 1 commit
  2. 22 Jan, 2018 1 commit
  3. 17 Jul, 2017 1 commit
  4. 16 Jul, 2017 1 commit
  5. 04 May, 2017 2 commits
  6. 07 Apr, 2017 1 commit
  7. 05 Apr, 2017 1 commit
    • Daniel Kahn Gillmor's avatar
      Implement sensible default EDNS(0) padding policy. · 2dd9f406
      Daniel Kahn Gillmor authored
      At NDSS 2017's DNS privacy workshop, I presented an empirical study of
      DNS padding policies:
      
      https://www.internetsociety.org/events/ndss-symposium/ndss-symposium-2017/dns-privacy-workshop-2017-programme#session3
      
      The slide deck is here:
      https://dns.cmrg.net/ndss2017-dprive-empirical-DNS-traffic-size.pdf
      
      The resulting recommendation from the research is that a simple
      padding policy is relatively cheap and still protective of metadata
      when DNS traffic is encrypted:
      
       * queries should be padded to a multiple of 128 octets
       * responses should be padded to a multiple of 468 octets
      
      Since future research could propose even better policies, and future
      DNS traffic characteristics might evolve, I've implemented this
      recommendation as a new function in libknot:
      knot_edns_default_padding_size()
      
      This changeset also modifies kdig to use this padding policy by
      default when doing queries over TLS, and defines +padding (with no
      argument) as a kdig option that forces the use of the default padding
      policy.
      
      With this changeset, any libknot user who wants to use "a sensible DNS
      padding policy" can just rely on the library; this means that if a
      better padding policy is determined in the future, it can be
      distributed to all users by upgrading libknot.
      2dd9f406
  8. 20 Mar, 2017 1 commit
  9. 15 Sep, 2016 1 commit
  10. 06 Aug, 2016 1 commit
  11. 01 Aug, 2016 1 commit
  12. 31 Jul, 2016 1 commit
  13. 19 Jul, 2016 1 commit
  14. 09 May, 2016 1 commit
  15. 31 Dec, 2015 1 commit
  16. 14 Sep, 2015 1 commit
  17. 07 Jul, 2015 1 commit
  18. 03 Jul, 2015 1 commit
  19. 03 Jun, 2015 1 commit
  20. 25 May, 2015 1 commit
  21. 18 May, 2015 1 commit
  22. 20 Apr, 2015 2 commits
  23. 16 Apr, 2015 2 commits
  24. 15 Apr, 2015 2 commits