<html><head><meta http-equiv="Content-Type" content="text/html charset=utf-8"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class="">Hi All, <div class=""><br class=""></div><div class="">Please consider submitting to the NDSS DNS Privacy Workshop 2018: Increasing Usability and Decreasing Traceability.</div><div class=""><br class=""></div><div class="">Call for papers: <a href="https://easychair.org/cfp/dprive2018" class="">https://easychair.org/cfp/dprive2018</a></div><div class="">Workshop Website: <a href="https://dnsprivacy.org/wiki/display/DNSPWS/DNS+Privacy+Workshop" class="">https://dnsprivacy.org/wiki/display/DNSPWS/DNS+Privacy+Workshop</a></div><div class=""><br class=""></div><div class=""><br class=""></div><div class="">Location and Important Dates</div><div class="">-----------------------------------------<br class="">Workshop Location: San Diego, CA, USA<br class="">Workshop date: 18th Feb 2018 (co-located with NDSS 2018)</div><div class=""><br class=""></div><div class="">Abstract submissions: 1st Dec 2017 anywhere-on-earth<br class="">Paper submission: 8th Dec 2017 anywhere-on-earth<br class="">Notifications and invitations to present at the workshop: 13th Jan 2018</div><div class=""><br class=""></div><div class="">Submissions may be new papers, papers already published, Short Papers, or<br class="">Position Papers. Also, please contact the TPC chairs if you want to<br class="">suggest a panel.</div><div class=""><br class=""></div><div class="">Allison, Sara and Melinda.</div><div class=""><br class=""></div><div class=""><br class=""></div><div class=""><br class=""></div><div class="">---</div><div class=""><br class=""></div><div class="">*Workshop on DNS Privacy 2018*</div><div class=""><br class=""></div><div class="">Background</div><div class="">-----------------<br class="">DNS Privacy has been a growing concern of the IETF and others in the Internet engineering community for the last few years. Almost every activity on the Internet starts with a DNS query (and often several).</div><div class=""><br class=""><div class="">* Those queries can reveal not only what websites an individual visits but also metadata about other services such as the domains of email contacts or chat services.
<br class=""></div><div class="">* Whilst the data in the DNS is public, individual DNS transactions made by an end user should not be public.
<br class=""></div><div class="">* Today, however DNS queries are sent in clear text (using UDP or TCP) which means passive eavesdroppers can observe all the DNS lookups performed.
<br class=""></div><div class="">* The DNS is a globally distributed system that crosses international boundaries and often uses servers in many different countries in order to provide resilience.
<br class=""></div><div class="">* It is well known that the NSA used the MORECOWBELL tool to perform mass surveillance of DNS traffic, and other surveillance techniques involving DNS almost certainly are in play today.
<br class=""></div><div class="">* Some ISPs embed user information (e.g. a user ID or MAC address) within DNS queries that go to the ISP’s resolver in order to provide services such as Parental Filtering. This allows for fingerprinting of individual users.
<br class=""></div><div class="">* Some CDNs embed user information (e.g. client subnets) in queries from resolvers to authoritative servers (to geo-locate end users). This allows for correlation of queries to particular subnets.
<br class=""></div><div class="">* Some ISPs log DNS queries at the resolver and share this information with third-parties in ways not known or obvious to end users.<br class=""></div><div class=""><br class=""></div>The IETF's DPRIVE Working Group has taken initial protocol steps to address these concerns (with much of the early work focussing on the stub to resolver problem), publishing DNS Privacy Considerations (RFC 7626), Specification for DNS over Transport Layer Security (RFC 7858), and The EDNS(0) Padding Option (RFC 7830), and DNS Query Name Minimisation to Improve Privacy (RFC 7816). However because of the great diversity of the DNS ecosystem, and the pervasive role of DNS and domain names in Internet applications and security, much is not fully understood or resolved. <br class=""> <br class="">The goal of this workshop is to bring together privacy and Internet researchers with a diversity of backgrounds and views, to identify promising long-term mitigations of the broad space of DNS privacy risks.</div><div class=""><br class=""></div><div class="">Call for Submissions</div><div class="">-----------------------------<br class="">We welcome submissions in the form of research papers, short papers, or draft presentations, concerning all aspects of the threats, the protocols, and future design spaces, of DNS privacy or the privacy of adjacent protocols. Usability, traceability, measurement and analytical evaluations are particularly encouraged. </div></body></html>