Shedding Light on Hidden Dangers: A New Perspective on DNS Leaks

Abstract

In this paper, we introduce a novel categorization of DNS leaks into Type 1 and Type 2, underscoring the privacy and security risks these pose to VPN users. A critical examination reveals how Stealth DNS servers, by remaining hidden from traditional DNS leak detection tools, contribute to a false sense of security, particularly with Type 2 leaks. We then highlight the challenges associated with detecting such leaks. The paper also explores proposed mitigations and best practices for VPN providers, emphasizing server-side protections and the strategic whitelisting of DNS servers to enhance online privacy and security.