(In)Security of DNS: DNSSEC, DoT, DoH & more

The Domain Name System (DNS) is used everywhere and is one of the most prevalent Internet protocols. Yet, for historic reasons, it is rather insecure. Multiple attempts have been undertaken to improve this in the past (DNSSEC & DNSCrypt), but are still not widely deployed. Only recently new efforts from some big players are starting to shake things up again with DNS over TLS & DNS over HTTPS. This presentation will dive into some of the details of these protocols and show their strengths and weaknesses and evaluate the chances of success to improve the overall situation at all.