OARC Neutrality

In this blogpost we outline OARC’s position regarding DNS-over-TLS, DNS-over-HTTPS and related technologies.

Mission

Role

Support

… we are careful to be neutral regarding the various competing technologies that are on offer, and do not prefer one technology over another where there are diverse offerings …

We thus don’t take a view on whether DoT, DoH, or other potential encrypted DNS technologies are superior to each other. This is in line with OARC’s neutrality policy, that stems from our roots as a membership organization with over 100 organizations that are sometimes competitors yet strive to work together for a better DNS.

Approach

Industry support to OARC

These are from the Mozilla Open Source Support (MOSS) program, and the Comcast Innovation Fund.

[The grants build] on OARC’s longstanding support from and to the DNS community, allowing us to combine these grants to build the tools and ecosystem needed to measure, analyze and support encrypted DNS.

The funded works includes a re-factoring of dnsperf’s’ code to make it more stand-alone and future proof, addition of session management capabilities more suited to connection-oriented DNS testing, and full DoH support. This builds on OARC’s longstanding support from and to the DNS community, allowing us to combine these grants to build the tools and ecosystem needed to measure, analyze and support encrypted DNS.

The addition of DoH/DoT capabilities to our existing dnsperf tool is in line with OARC’s neutral, evidence-based approach — it will allow testing, measurement, comparison and analysis of the various different encrypted technologies. We are hopeful it will generate some answers about the merits of the various approaches to Encrypted DNS, helping operators decide which of these are most suitable for deployment, how best to deploy them, and for which use cases.

Read more about OARC’s neutrality policy here:https://www.dns-oarc.net/files/policies/neutrality-policy.pdf

Domain Name System Operations Analysis and Research Center