EDNS CLIENT SUBNET (ECS) – DNS CDN MAGIC OR SECURITY BLACK HOLE?

No ratings

Presented at Nolacon 2017 by

Jim Nitterauer

In January, 2011, the first version of Client subnet in DNS requests (draft-vandergaast-edns-client-subnet-00) was published as a collaborative effort by researchers from Google, Verisign and Neustar. This document defines a specific option 8 – which “conveys network information that is relevant to the message but not otherwise included in the datagram,” allowing for both recursive and authoritative DNS servers to gain information regarding the network origin of the DNS request. This draft has been adopted as RFC 7871 and is currently undergoing review. The theory behind EDNS0 Option 8, more commonly known as EDNS0 Client Subnet, is that by...