{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,6,4]],"date-time":"2026-06-04T14:40:37Z","timestamp":1780584037976,"version":"3.54.1"},"publisher-location":"New York, NY, USA","reference-count":74,"publisher":"ACM","license":[{"start":{"date-parts":[[2019,10,21]],"date-time":"2019-10-21T00:00:00Z","timestamp":1571616000000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.acm.org\/publications\/policies\/copyright_policy#Background"}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2019,10,21]]},"DOI":"10.1145\/3355369.3355580","type":"proceedings-article","created":{"date-parts":[[2019,10,18]],"date-time":"2019-10-18T12:57:15Z","timestamp":1571403435000},"page":"22-35","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":83,"title":["An End-to-End, Large-Scale Measurement of DNS-over-Encryption"],"prefix":"10.1145","author":[{"given":"Chaoyi","family":"Lu","sequence":"first","affiliation":[{"name":"Institute for Network Sciences and Cyberspace, Tsinghua University and Beijing National Research Center for Information Science and Technology (BNRist), Tsinghua University"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Baojun","family":"Liu","sequence":"additional","affiliation":[{"name":"Department of Computer Science and Technology, Tsinghua University"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Zhou","family":"Li","sequence":"additional","affiliation":[{"name":"University of California, Irvine"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Shuang","family":"Hao","sequence":"additional","affiliation":[{"name":"University of Texas at Dallas"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Haixin","family":"Duan","sequence":"additional","affiliation":[{"name":"Institute for Network Sciences and Cyberspace, Tsinghua University; Beijing National Research Center for Information Science and Technology (BNRist), Tsinghua University and Qi An Xin Technology Research Institute"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Mingming","family":"Zhang","sequence":"additional","affiliation":[{"name":"Institute for Network Sciences and Cyberspace, Tsinghua University"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Chunying","family":"Leng","sequence":"additional","affiliation":[{"name":"Institute for Network Sciences and Cyberspace, Tsinghua University"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Ying","family":"Liu","sequence":"additional","affiliation":[{"name":"Institute for Network Sciences and Cyberspace, Tsinghua University"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Zaifeng","family":"Zhang","sequence":"additional","affiliation":[{"name":"360 Netlab"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Jianping","family":"Wu","sequence":"additional","affiliation":[{"name":"Institute for Network Sciences and Cyberspace, Tsinghua University"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"320","published-online":{"date-parts":[[2019,10,21]]},"reference":[{"key":"e_1_3_2_1_1_1","unstructured":"[n. d.]. Cisco IOS NetFlow. https:\/\/www.cisco.com\/c\/en\/us\/products\/ios-nx-os-software\/ios-netflow\/index.html.  [n. d.]. Cisco IOS NetFlow. https:\/\/www.cisco.com\/c\/en\/us\/products\/ios-nx-os-software\/ios-netflow\/index.html."},{"key":"e_1_3_2_1_2_1","unstructured":"[n. d.]. Cloudflare Resolver. https:\/\/cloudflare-dns.com\/.  [n. d.]. Cloudflare Resolver. https:\/\/cloudflare-dns.com\/."},{"key":"e_1_3_2_1_3_1","unstructured":"[n. d.]. DNSCrypt-proxy 2. https:\/\/github.com\/jedisct1\/dnscrypt-proxy.  [n. d.]. DNSCrypt-proxy 2. https:\/\/github.com\/jedisct1\/dnscrypt-proxy."},{"key":"e_1_3_2_1_4_1","unstructured":"[n. d.]. Google Public DNS. https:\/\/developers.google.com\/speed\/public-dns\/.  [n. d.]. Google Public DNS. https:\/\/developers.google.com\/speed\/public-dns\/."},{"key":"e_1_3_2_1_5_1","unstructured":"[n. d.]. HTTP and SOCKS PROXIES. https:\/\/www.proxyrack.com\/.  [n. d.]. HTTP and SOCKS PROXIES. https:\/\/www.proxyrack.com\/."},{"key":"e_1_3_2_1_6_1","unstructured":"[n. d.]. Knot DNS. https:\/\/www.knot-dns.cz\/.  [n. d.]. Knot DNS. https:\/\/www.knot-dns.cz\/."},{"key":"e_1_3_2_1_7_1","unstructured":"[n. d.]. Latest 1.1.1.1 Topics - Cloudflare Community. https:\/\/community.cloudflare.com\/c\/reliability\/1111.  [n. d.]. Latest 1.1.1.1 Topics - Cloudflare Community. https:\/\/community.cloudflare.com\/c\/reliability\/1111."},{"key":"e_1_3_2_1_8_1","unstructured":"[n. d.]. Let's Encrypt - Free SSL\/TLS Certificates. https:\/\/letsencrypt.org.  [n. d.]. Let's Encrypt - Free SSL\/TLS Certificates. https:\/\/letsencrypt.org."},{"key":"e_1_3_2_1_9_1","unstructured":"[n. d.]. OpenNIC Project. https:\/\/www.opennic.org\/.  [n. d.]. OpenNIC Project. https:\/\/www.opennic.org\/."},{"key":"e_1_3_2_1_10_1","unstructured":"[n. d.]. Zhima Proxy. http:\/\/h.zhimaruanjian.com\/.  [n. d.]. Zhima Proxy. http:\/\/h.zhimaruanjian.com\/."},{"key":"e_1_3_2_1_11_1","unstructured":"2013. DNSCrypt version 2 protocol specification. https:\/\/dnscrypt.info\/protocol.  2013. DNSCrypt version 2 protocol specification. https:\/\/dnscrypt.info\/protocol."},{"key":"e_1_3_2_1_12_1","unstructured":"2014. The NSA and GCHQ's QUANTUMTHEORY Hacking Tactics. https:\/\/theintercept.com\/document\/2014\/03\/12\/nsa-gchqs-quantumtheory-hacking-tactics\/.  2014. The NSA and GCHQ's QUANTUMTHEORY Hacking Tactics. https:\/\/theintercept.com\/document\/2014\/03\/12\/nsa-gchqs-quantumtheory-hacking-tactics\/."},{"key":"e_1_3_2_1_13_1","unstructured":"2018. OpenSSL Cryptography and SSL\/TLS toolkit. https:\/\/www.openssl.org\/.  2018. OpenSSL Cryptography and SSL\/TLS toolkit. https:\/\/www.openssl.org\/."},{"key":"e_1_3_2_1_14_1","unstructured":"2018. Quad9 DNS: Internet Security & Privacy In a Few Easy Steps. https:\/\/www.quad9.net\/.  2018. Quad9 DNS: Internet Security & Privacy In a Few Easy Steps. https:\/\/www.quad9.net\/."},{"key":"e_1_3_2_1_15_1","unstructured":"2018. WLC Virtual IP address 1.1.1.1. https:\/\/www.cisco.com\/c\/en\/us\/support\/docs\/wireless-mobility\/wireless-lan-wlan\/213535-wlc-virtual-ip-address-1-1-1-1.html.  2018. WLC Virtual IP address 1.1.1.1. https:\/\/www.cisco.com\/c\/en\/us\/support\/docs\/wireless-mobility\/wireless-lan-wlan\/213535-wlc-virtual-ip-address-1-1-1-1.html."},{"key":"e_1_3_2_1_16_1","unstructured":"2019. 360 PassiveDNS. https:\/\/passivedns.cn\/help\/.  2019. 360 PassiveDNS. https:\/\/passivedns.cn\/help\/."},{"key":"e_1_3_2_1_17_1","unstructured":"2019. Getdns API. https:\/\/github.com\/getdnsapi\/getdns.  2019. Getdns API. https:\/\/github.com\/getdnsapi\/getdns."},{"key":"e_1_3_2_1_18_1","unstructured":"2019. Luminati: Residental Proxy Service for Businesses. https:\/\/luminati.io.  2019. Luminati: Residental Proxy Service for Businesses. https:\/\/luminati.io."},{"key":"e_1_3_2_1_19_1","unstructured":"2019. MOZILLA Included CA Certificate List. https:\/\/ccadb-public.secure.force.com\/mozilla\/IncludedCACertificateReport.  2019. MOZILLA Included CA Certificate List. https:\/\/ccadb-public.secure.force.com\/mozilla\/IncludedCACertificateReport."},{"key":"e_1_3_2_1_20_1","unstructured":"2019. NetworkScan Mon. https:\/\/scan.netlab.360.com\/#\/dashboard.  2019. NetworkScan Mon. https:\/\/scan.netlab.360.com\/#\/dashboard."},{"key":"e_1_3_2_1_21_1","unstructured":"2019. NLnetLabs - Unbound. https:\/\/www.nlnetlabs.nl\/projects\/unbound\/about\/.  2019. NLnetLabs - Unbound. https:\/\/www.nlnetlabs.nl\/projects\/unbound\/about\/."},{"key":"e_1_3_2_1_22_1","unstructured":"2019. Passive DNS historical internet database: Farsight DNSDB. https:\/\/www.farsightsecurity.com\/solutions\/dnsdb\/  2019. Passive DNS historical internet database: Farsight DNSDB. https:\/\/www.farsightsecurity.com\/solutions\/dnsdb\/"},{"key":"e_1_3_2_1_23_1","unstructured":"2019. RIPE Atlas - RIPE Network Coordination Centre. https:\/\/atlas.ripe.net\/.  2019. RIPE Atlas - RIPE Network Coordination Centre. https:\/\/atlas.ripe.net\/."},{"key":"e_1_3_2_1_24_1","unstructured":"2019. Systemd - News. https:\/\/github.com\/systemd\/systemd\/blob\/master\/NEWS.  2019. Systemd - News. https:\/\/github.com\/systemd\/systemd\/blob\/master\/NEWS."},{"key":"e_1_3_2_1_25_1","unstructured":"2019. Yandex.DNS. https:\/\/dns.yandex.com\/.  2019. Yandex.DNS. https:\/\/dns.yandex.com\/."},{"key":"e_1_3_2_1_26_1","volume-title":"Detecting DNS Root Manipulation. In PAM 2016, Heraklion, Greece, March 31-April 1, 2016. Proceedings","volume":"9631","author":"Allman Mark","year":"2016","unstructured":"Mark Allman . 2016 . Detecting DNS Root Manipulation. In PAM 2016, Heraklion, Greece, March 31-April 1, 2016. Proceedings , Vol. 9631 . Springer, 276. Mark Allman. 2016. Detecting DNS Root Manipulation. In PAM 2016, Heraklion, Greece, March 31-April 1, 2016. Proceedings, Vol. 9631. Springer, 276."},{"key":"e_1_3_2_1_27_1","volume-title":"FOCI 14","author":"Anonymous","unstructured":"Anonymous . 2014. Towards a Comprehensive Picture of the Great Firewall's DNS Censorship . In FOCI 14 . USENIX Association , San Diego, CA . https:\/\/www.usenix.org\/conference\/foci14\/workshop-program\/presentation\/anonymous Anonymous. 2014. Towards a Comprehensive Picture of the Great Firewall's DNS Censorship. In FOCI 14. USENIX Association, San Diego, CA. https:\/\/www.usenix.org\/conference\/foci14\/workshop-program\/presentation\/anonymous"},{"key":"e_1_3_2_1_28_1","unstructured":"APNIC. 2019. DNSSEC Measurement Maps. https:\/\/stats.labs.apnic.net\/dnssec.  APNIC. 2019. DNSSEC Measurement Maps. https:\/\/stats.labs.apnic.net\/dnssec."},{"key":"e_1_3_2_1_31_1","unstructured":"Jon Brodkin. 2018. AT&T explains why it blocked Cloudflare DNS: It was just an accident. https:\/\/arstechnica.com\/information-technology\/2018\/05\/att-is-blocking-cloudflares-privacy-focused-dns-calls-it-an-accident\/.  Jon Brodkin. 2018. AT&T explains why it blocked Cloudflare DNS: It was just an accident. https:\/\/arstechnica.com\/information-technology\/2018\/05\/att-is-blocking-cloudflares-privacy-focused-dns-calls-it-an-accident\/."},{"key":"e_1_3_2_1_32_1","volume-title":"IRTF & ISOC Workshop on Research and Applications of Internet Measurements (RAIM).","author":"Chang Deliang","year":"2015","unstructured":"Deliang Chang , Qianli Zhang , and Xing Li . 2015 . Study on os fingerprinting and nat\/tethering based on dns log analysis . In IRTF & ISOC Workshop on Research and Applications of Internet Measurements (RAIM). Deliang Chang, Qianli Zhang, and Xing Li. 2015. Study on os fingerprinting and nat\/tethering based on dns log analysis. In IRTF & ISOC Workshop on Research and Applications of Internet Measurements (RAIM)."},{"key":"e_1_3_2_1_33_1","volume-title":"26th { USENIX} Security Symposium ({USENIX} Security 17). 1307--1322.","author":"Chung Taejoong","unstructured":"Taejoong Chung , Roland van Rijswijk-Deij , Balakrishnan Chandrasekaran , David Choffnes , Dave Levin , Bruce M Maggs , Alan Mislove , and Christo Wilson . 2017. A Longitudinal , End-to-End View of the {DNSSEC} Ecosystem . In 26th { USENIX} Security Symposium ({USENIX} Security 17). 1307--1322. Taejoong Chung, Roland van Rijswijk-Deij, Balakrishnan Chandrasekaran, David Choffnes, Dave Levin, Bruce M Maggs, Alan Mislove, and Christo Wilson. 2017. A Longitudinal, End-to-End View of the {DNSSEC} Ecosystem. In 26th { USENIX} Security Symposium ({USENIX} Security 17). 1307--1322."},{"key":"e_1_3_2_1_34_1","unstructured":"Internet Systems Consortuim. 2019. BIND 9 Open Source DNS Server. https:\/\/www.isc.org\/downloads\/bind\/.  Internet Systems Consortuim. 2019. BIND 9 Open Source DNS Server. https:\/\/www.isc.org\/downloads\/bind\/."},{"key":"e_1_3_2_1_35_1","unstructured":"David Dagon Niels Provos Christopher P Lee and Wenke Lee. 2008. Corrupted DNS Resolution Paths: The Rise of a Malicious Resolution Authority.. In NDSS.  David Dagon Niels Provos Christopher P Lee and Wenke Lee. 2008. Corrupted DNS Resolution Paths: The Rise of a Malicious Resolution Authority.. In NDSS."},{"key":"e_1_3_2_1_36_1","unstructured":"John Dickinson and Sara Dickinson. 2019. DNS Privacy Implementation Status. https:\/\/dnsprivacy.org\/wiki\/display\/DP\/DNS+Privacy+Implementation+Status.  John Dickinson and Sara Dickinson. 2019. DNS Privacy Implementation Status. https:\/\/dnsprivacy.org\/wiki\/display\/DP\/DNS+Privacy+Implementation+Status."},{"key":"e_1_3_2_1_37_1","unstructured":"Sara Dickinson. 2018. DNS Privacy Project. https:\/\/dnsprivacy.org\/wiki\/display\/DP.  Sara Dickinson. 2018. DNS Privacy Project. https:\/\/dnsprivacy.org\/wiki\/display\/DP."},{"key":"e_1_3_2_1_38_1","unstructured":"Sara Dickinson. 2019. DNS Privacy Daemon - Stubby. https:\/\/dnsprivacy.org\/wiki\/display\/DP\/DNS+Privacy+Daemon+-+Stubby.  Sara Dickinson. 2019. DNS Privacy Daemon - Stubby. https:\/\/dnsprivacy.org\/wiki\/display\/DP\/DNS+Privacy+Daemon+-+Stubby."},{"key":"e_1_3_2_1_39_1","unstructured":"Sara Dickinson. 2019. DNS Privacy Test Servers. https:\/\/dnsprivacy.org\/wiki\/display\/DP\/DNS+Privacy+Test+Servers.  Sara Dickinson. 2019. DNS Privacy Test Servers. https:\/\/dnsprivacy.org\/wiki\/display\/DP\/DNS+Privacy+Test+Servers."},{"key":"e_1_3_2_1_40_1","unstructured":"Google Public DNS. 2019. Migration to anycast and RFC 8484 DoH. https:\/\/developers.google.com\/speed\/public-dns\/docs\/doh\/migration.  Google Public DNS. 2019. Migration to anycast and RFC 8484 DoH. https:\/\/developers.google.com\/speed\/public-dns\/docs\/doh\/migration."},{"key":"e_1_3_2_1_41_1","doi-asserted-by":"crossref","unstructured":"Zakir Durumeric Zane Ma Drew Springall Richard Barnes Nick Sullivan Elie Bursztein Michael Bailey J Alex Halderman and Vern Paxson. 2017. The security impact of HTTPS interception. In NDSS.  Zakir Durumeric Zane Ma Drew Springall Richard Barnes Nick Sullivan Elie Bursztein Michael Bailey J Alex Halderman and Vern Paxson. 2017. The security impact of HTTPS interception. In NDSS.","DOI":"10.14722\/ndss.2017.23456"},{"key":"e_1_3_2_1_42_1","volume-title":"USENIX Security Symposium","volume":"8","author":"Durumeric Zakir","year":"2013","unstructured":"Zakir Durumeric , Eric Wustrow , and J Alex Halderman . 2013 . ZMap: Fast Internet-wide Scanning and Its Security Applications .. In USENIX Security Symposium , Vol. 8 . 47--53. Zakir Durumeric, Eric Wustrow, and J Alex Halderman. 2013. ZMap: Fast Internet-wide Scanning and Its Security Applications.. In USENIX Security Symposium, Vol. 8. 47--53."},{"key":"e_1_3_2_1_43_1","unstructured":"Fortinet. 2017. Preventing certificate warnings (default certificate). https:\/\/cookbook.fortinet.com\/preventing-certificate-warnings-defaultcert-56\/.  Fortinet. 2017. Preventing certificate warnings (default certificate). https:\/\/cookbook.fortinet.com\/preventing-certificate-warnings-defaultcert-56\/."},{"key":"e_1_3_2_1_44_1","unstructured":"Christian Grothoff Matthias Wachs Monika Ermert and Jacob Appelbaum. 2015. NSA's MORECOWBELL: Knell for DNS. https:\/\/leaksource.files.wordpress.com\/2015\/02\/nsas-morecowbell-knell-for-dns.pdf.  Christian Grothoff Matthias Wachs Monika Ermert and Jacob Appelbaum. 2015. NSA's MORECOWBELL: Knell for DNS. https:\/\/leaksource.files.wordpress.com\/2015\/02\/nsas-morecowbell-knell-for-dns.pdf."},{"key":"e_1_3_2_1_45_1","unstructured":"DPRIVE Working Group. 2018. DNS PRIVate Exchange WG. https:\/\/datatracker.ietf.org\/doc\/charter-ietf-dprive\/.  DPRIVE Working Group. 2018. DNS PRIVate Exchange WG. https:\/\/datatracker.ietf.org\/doc\/charter-ietf-dprive\/."},{"key":"e_1_3_2_1_46_1","unstructured":"Olafur Guomundsson and Marek Vavrusa. 2018. DoH and DoT experience. https:\/\/indico.dns-oarc.net\/event\/29\/contributions\/653\/attachments\/640\/1027\/DoT_and_DoH_experience.pdf.  Olafur Guomundsson and Marek Vavrusa. 2018. DoH and DoT experience. https:\/\/indico.dns-oarc.net\/event\/29\/contributions\/653\/attachments\/640\/1027\/DoT_and_DoH_experience.pdf."},{"key":"e_1_3_2_1_47_1","unstructured":"Brian Haberman and Catherine Master. 2018. DNS-over-TLS Measurements with RIPE Atlas Probes. https:\/\/datatracker.ietf.org\/meeting\/102\/materials\/slides-102-dprive-dns-over-tls-measurements-with-ripe-atlas-probes-01.  Brian Haberman and Catherine Master. 2018. DNS-over-TLS Measurements with RIPE Atlas Probes. https:\/\/datatracker.ietf.org\/meeting\/102\/materials\/slides-102-dprive-dns-over-tls-measurements-with-ripe-atlas-probes-01."},{"key":"e_1_3_2_1_48_1","doi-asserted-by":"publisher","DOI":"10.1016\/j.cose.2013.03.012"},{"key":"e_1_3_2_1_51_1","unstructured":"Christian Huitema Melinda Shore Allison Mankin Sara Dickinson and Jana Iyengar. 2018. Specification of DNS over Dedicated QUIC Connections. https:\/\/tools.ietf.org\/html\/draft-huitema-quic-dnsoquic-05.  Christian Huitema Melinda Shore Allison Mankin Sara Dickinson and Jana Iyengar. 2018. Specification of DNS over Dedicated QUIC Connections. https:\/\/tools.ietf.org\/html\/draft-huitema-quic-dnsoquic-05."},{"key":"e_1_3_2_1_52_1","unstructured":"Daniel Kahn Gillmor. 2018. Trust relationships between users and private DNS resolvers. https:\/\/drive.google.com\/file\/d\/13AeDutZJ1WZ-PrNZ9ZROsAc1-jfdhHvm\/view  Daniel Kahn Gillmor. 2018. Trust relationships between users and private DNS resolvers. https:\/\/drive.google.com\/file\/d\/13AeDutZJ1WZ-PrNZ9ZROsAc1-jfdhHvm\/view"},{"key":"e_1_3_2_1_53_1","unstructured":"Karthikeyan C Kasiviswanathan. 2018. Postmortem of a Compromised MikroTik Router. https:\/\/www.symantec.com\/blogs\/threat-intelligence\/hacked-mikrotik-router.  Karthikeyan C Kasiviswanathan. 2018. Postmortem of a Compromised MikroTik Router. https:\/\/www.symantec.com\/blogs\/threat-intelligence\/hacked-mikrotik-router."},{"key":"e_1_3_2_1_54_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-28865-9_19"},{"key":"e_1_3_2_1_55_1","doi-asserted-by":"publisher","DOI":"10.1145\/2996758.2996770"},{"key":"e_1_3_2_1_56_1","unstructured":"Erik Kline and Ben Schwartz. 2018. DNS over TLS support in Android P Developer Preview. https:\/\/android-developers.googleblog.com\/2018\/04\/dns-over-tls-support-in-android-p.html  Erik Kline and Ben Schwartz. 2018. DNS over TLS support in Android P Developer Preview. https:\/\/android-developers.googleblog.com\/2018\/04\/dns-over-tls-support-in-android-p.html"},{"key":"e_1_3_2_1_57_1","doi-asserted-by":"crossref","unstructured":"Marc K\u00fchrer Thomas Hupperich Jonas Bushart Christian Rossow and Thorsten Holz. 2015. Going wild: Large-scale classification of open DNS resolvers. In IMC. ACM 355--368.  Marc K\u00fchrer Thomas Hupperich Jonas Bushart Christian Rossow and Thorsten Holz. 2015. Going wild: Large-scale classification of open DNS resolvers. In IMC. ACM 355--368.","DOI":"10.1145\/2815675.2815683"},{"key":"e_1_3_2_1_58_1","unstructured":"Wilson Lian Eric Rescorla Hovav Shacham and Stefan Savage. 2013. Measuring the Practical Impact of DNSSEC Deployment.. In USENIX.  Wilson Lian Eric Rescorla Hovav Shacham and Stefan Savage. 2013. Measuring the Practical Impact of DNSSEC Deployment.. In USENIX."},{"key":"e_1_3_2_1_59_1","volume-title":"Measuring query latency of top level DNS servers","author":"Liang Jinjin","unstructured":"Jinjin Liang , Jian Jiang , Haixin Duan , Kang Li , and Jianping Wu. 2013. Measuring query latency of top level DNS servers . In PAM. Springer , 145--154. Jinjin Liang, Jian Jiang, Haixin Duan, Kang Li, and Jianping Wu. 2013. Measuring query latency of top level DNS servers. In PAM. Springer, 145--154."},{"key":"e_1_3_2_1_60_1","volume-title":"USENIX Security Symposium. 1113--1128","author":"Liu Baojun","year":"2018","unstructured":"Baojun Liu , Chaoyi Lu , Haixin Duan , Ying Liu , Zhou Li , Shuang Hao , and Min Yang . 2018 . Who is answering my queries: understanding and characterizing interception of the DNS resolution path . In USENIX Security Symposium. 1113--1128 . Baojun Liu, Chaoyi Lu, Haixin Duan, Ying Liu, Zhou Li, Shuang Hao, and Min Yang. 2018. Who is answering my queries: understanding and characterizing interception of the DNS resolution path. In USENIX Security Symposium. 1113--1128."},{"key":"e_1_3_2_1_61_1","doi-asserted-by":"crossref","unstructured":"Alexander Mayrhofer. 2016. The edns (0) padding option. (2016).  Alexander Mayrhofer. 2016. The edns (0) padding option. (2016).","DOI":"10.17487\/RFC7830"},{"key":"e_1_3_2_1_62_1","unstructured":"Patrick McManus. 2018. Firefox Nightly Secure DNS Experimental Results. https:\/\/blog.nightly.mozilla.org\/2018\/08\/28\/firefox-nightly-secure-dns-experimental-results\/.  Patrick McManus. 2018. Firefox Nightly Secure DNS Experimental Results. https:\/\/blog.nightly.mozilla.org\/2018\/08\/28\/firefox-nightly-secure-dns-experimental-results\/."},{"key":"e_1_3_2_1_63_1","unstructured":"Patrick McManus. 2018. Improving DNS Privacyin Firefox - Firefox Nightly News. https:\/\/blog.nightly.mozilla.org\/2018\/06\/01\/improving-dns-privacy-in-firefox\/.  Patrick McManus. 2018. Improving DNS Privacyin Firefox - Firefox Nightly News. https:\/\/blog.nightly.mozilla.org\/2018\/06\/01\/improving-dns-privacy-in-firefox\/."},{"key":"e_1_3_2_1_64_1","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2019.00011"},{"key":"e_1_3_2_1_65_1","unstructured":"360\n    Netlab. 2019. Netlab OpenData. https:\/\/data.netlab.360.com\/.  360 Netlab. 2019. Netlab OpenData. https:\/\/data.netlab.360.com\/."},{"key":"e_1_3_2_1_66_1","volume-title":"USENIX Security Symposium. USENIX. 307--323","author":"Pearce Paul","year":"2017","unstructured":"Paul Pearce , Ben Jones , Frank Li , Roya Ensafi , Nick Feamster , Nick Weaver , and Vern Paxson . 2017 . Global measurement of dns manipulation . In USENIX Security Symposium. USENIX. 307--323 . Paul Pearce, Ben Jones, Frank Li, Roya Ensafi, Nick Feamster, Nick Weaver, and Vern Paxson. 2017. Global measurement of dns manipulation. In USENIX Security Symposium. USENIX. 307--323."},{"key":"e_1_3_2_1_67_1","unstructured":"Matt Prytuluk. 2018. Preventing Circumvention of Cisco Umbrella with Firewall Rules. https:\/\/support.umbrella.com\/hc\/en-us\/articles\/230904088-Preventing-Circumvention-of-Cisco-Umbrella-with-Firewall-Rules.  Matt Prytuluk. 2018. Preventing Circumvention of Cisco Umbrella with Firewall Rules. https:\/\/support.umbrella.com\/hc\/en-us\/articles\/230904088-Preventing-Circumvention-of-Cisco-Umbrella-with-Firewall-Rules."},{"key":"e_1_3_2_1_68_1","unstructured":"Rod Rasmussen. 2016. The Pros and Cons of DNS Encryption. https:\/\/www.infosecurity-magazine.com\/opinions\/the-pros-and-cons-of-dns-encryption\/.  Rod Rasmussen. 2016. The Pros and Cons of DNS Encryption. https:\/\/www.infosecurity-magazine.com\/opinions\/the-pros-and-cons-of-dns-encryption\/."},{"key":"e_1_3_2_1_69_1","unstructured":"Tirumaleswar Reddy Daniel Gillmor and Sara Dickinson. 2018. Usage Profiles for DNS over TLS and DNS over DTLS. (2018).  Tirumaleswar Reddy Daniel Gillmor and Sara Dickinson. 2018. Usage Profiles for DNS over TLS and DNS over DTLS. (2018)."},{"key":"e_1_3_2_1_71_1","unstructured":"Sandra Siby Marc Juarez Narseo Vallina-Rodriguez and Carmela Troncoso. 2018. DNS Privacy not so private: the traffic analysis perspective. (2018).  Sandra Siby Marc Juarez Narseo Vallina-Rodriguez and Carmela Troncoso. 2018. DNS Privacy not so private: the traffic analysis perspective. (2018)."},{"key":"e_1_3_2_1_72_1","volume-title":"The impact of passive dns collection on end-user privacy. Securing and Trusting Internet Names","author":"Spring Jonathan M","year":"2012","unstructured":"Jonathan M Spring and Carly L Huth . 2012. The impact of passive dns collection on end-user privacy. Securing and Trusting Internet Names ( 2012 ). Jonathan M Spring and Carly L Huth. 2012. The impact of passive dns collection on end-user privacy. Securing and Trusting Internet Names (2012)."},{"key":"e_1_3_2_1_73_1","unstructured":"Daniel Stenberg. 2019. Public available servers. https:\/\/github.com\/curl\/curl\/wiki\/DNS-over-HTTPS#publicly-available-servers.  Daniel Stenberg. 2019. Public available servers. https:\/\/github.com\/curl\/curl\/wiki\/DNS-over-HTTPS#publicly-available-servers."},{"key":"e_1_3_2_1_74_1","unstructured":"Marty Strong. 2018. Fixing Reachability to 1.1.1.1 GLOBALLY! https:\/\/labs.ripe.net\/Members\/marty_strong\/fixing-reachability-to-1-1-1-1-globally  Marty Strong. 2018. Fixing Reachability to 1.1.1.1 GLOBALLY! https:\/\/labs.ripe.net\/Members\/marty_strong\/fixing-reachability-to-1-1-1-1-globally"},{"key":"e_1_3_2_1_75_1","unstructured":"Nick Sullivan. 2017. Introducing Zero Round Trip Time Resumption (0-RTT). https:\/\/blog.cloudflare.com\/introducing-0-rtt\/.  Nick Sullivan. 2017. Introducing Zero Round Trip Time Resumption (0-RTT). https:\/\/blog.cloudflare.com\/introducing-0-rtt\/."},{"key":"e_1_3_2_1_76_1","doi-asserted-by":"publisher","DOI":"10.1145\/3038912.3052571"},{"key":"e_1_3_2_1_77_1","unstructured":"David Ulevitch. 2011. DNSCrypt: Critical fundamental and about time. https:\/\/umbrella.cisco.com\/blog\/2011\/12\/06\/dnscrypt-critical-fundamental-and-about-time\/.  David Ulevitch. 2011. DNSCrypt: Critical fundamental and about time. https:\/\/umbrella.cisco.com\/blog\/2011\/12\/06\/dnscrypt-critical-fundamental-and-about-time\/."},{"key":"e_1_3_2_1_78_1","unstructured":"Nicholas Weaver Christian Kreibich and Vern Paxson. 2011. Redirecting DNS for Ads and Profit.. In FOCI.  Nicholas Weaver Christian Kreibich and Vern Paxson. 2011. Redirecting DNS for Ads and Profit.. In FOCI."},{"key":"e_1_3_2_1_79_1","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2015.18"}],"event":{"name":"IMC '19: ACM Internet Measurement Conference","location":"Amsterdam Netherlands","acronym":"IMC '19","sponsor":["SIGMETRICS ACM Special Interest Group on Measurement and Evaluation","SIGCOMM ACM Special Interest Group on Data Communication"]},"container-title":["Proceedings of the Internet Measurement Conference"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3355369.3355580","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3355369.3355580","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,6,17]],"date-time":"2025-06-17T23:23:33Z","timestamp":1750202613000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3355369.3355580"}},"subtitle":["How Far Have We Come?"],"short-title":[],"issued":{"date-parts":[[2019,10,21]]},"references-count":74,"alternative-id":["10.1145\/3355369.3355580","10.1145\/3355369"],"URL":"https:\/\/doi.org\/10.1145\/3355369.3355580","relation":{},"subject":[],"published":{"date-parts":[[2019,10,21]]},"assertion":[{"value":"2019-10-21","order":2,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}