Privacy Concerns in the Domain Name System

Posted: 28 Mar 2016

See all articles by Samantha Bradshaw

Samantha Bradshaw

Centre for International Governance Innovation (CIGI)

Laura DeNardis

American University; Yale Information Society Project

Date Written: March 28, 2016

Abstract

Some of the most contentious policy debates of our time involve questions surrounding the privacy of user data and the extent to which personally identifiable information is encrypted on mobile devices, in transit, or in the cloud. However, one aspect of personal privacy often missing from the public discourse is the question of confidentiality in the Internet’s Domain Name System (DNS). The DNS is a distributed but hierarchically organized system that translates alphanumeric domain names into IP addresses. One facet of Internet governance scholarship on the DNS has focused on examining public policy concerns related to freedom of speech, intellectual property, cybersecurity, and jurisdictional oversight. However, the design of the DNS also inherently raises a number of privacy concerns, one being the technological condition that DNS queries are almost always unencrypted. Although these queries do not contain “content” such as email text, images, or search terms, they do reveal the sites a user visits. As such, query data can disclose sensitive information-seeking practices related to addiction services, gender identity, disease treatment, pornography, abortion clinics, mental illness, employment, or online dating services. Given that almost every activity online begins with a DNS query, concerns about the prospects for unauthorized access to query information and practices for how queries are processed, retained, aggregated, or shared should be examined further.

Situated conceptually in the field of Science and Technology Studies (STS) and topically within the extensive body of research on global Internet governance, this research project asks: to what extent do DNS queries raise privacy considerations; what is at stake for Internet privacy, security, business models and stability; and how can various Internet governance stakeholders address these privacy concerns? To help establish the dominant frames for conceptualizing privacy in the public sphere, the research project examines dominant media sources for a five-year period between 2010-2015 and compares this coverage data to other online privacy concerns such as search engine privacy and user device encryption. To assess the extent of privacy concerns implicated by DNS queries and understand the stakes of various privacy mitigating options, the research project draws from interviews with DNS engineers and privacy advocates; the archival mailing lists of the DNS Privacy Working Group; proceedings of meetings of the Internet Engineering Task Force; and relevant Internet Request for Comments (RFCs).

This paper makes two contributions to information and communication technology policy and scholarship: first, it will contribute to the corpus of Internet governance scholarship around the Domain Name System by expanding the spectrum of policy issues it implicates to include concerns about individual privacy; and second, it will provide an evidentiary basis to expand policymaking considerations around privacy to include DNS queries rather than primarily content and personally identifiable information.

Keywords: Privacy, Domain Name System, Data Security, Internet Policy, Human Rights, Internet Governance, Information Policy

Suggested Citation

Bradshaw, Samantha and DeNardis, Laura, Privacy Concerns in the Domain Name System (March 28, 2016). TPRC 44: The 44th Research Conference on Communication, Information and Internet Policy 2016. Available at SSRN: https://ssrn.com/abstract=2755558

Samantha Bradshaw (Contact Author)

Centre for International Governance Innovation (CIGI) ( email )

57 Erb Street West
Waterloo, Ontario N2L 6C2
Canada

Laura DeNardis

American University ( email )

4400 Massachusetts Ave, NW
Washington, DC 20016
United States

Yale Information Society Project ( email )

127 Wall Street
New Haven, CT 06511
United States

Register to save articles to
your library

Register

Paper statistics

Abstract Views
444
PlumX Metrics