Security & DNS Caches

h2s · 2007-11-03 19:20:39

Had a discussion in work about this and of course different opinions emerged about this, so I'll throw it open here to see what others think. When using DNS services such a openDNS which use large caches to help speed things up, how secure is your browsing of secure websites such as online banking, shopping, etc... It is…

03-11-2007 07:20PM

#1

h2s

Registered Users, Registered Users 2 Posts: 287 ✭✭

Join Date: September 2003

Posts: 241

Had a discussion in work about this and of course different opinions emerged about this, so I'll throw it open here to see what others think.

When using DNS services such a openDNS which use large caches to help speed things up, how secure is your browsing of secure websites such as online banking, shopping, etc... It is possible for a savvy IT person to examine the caches to extract confidential information that may be stored during the transactions with the websites?

0

Comments

#2 07-11-2007 12:26AM

FruitLover

Registered Users, Registered Users 2 Posts: 2,534 ✭✭✭

Join Date: October 2004

Posts: 2516

No. The only information that will be sent to these DNS servers is FQDNs.

0
#3 07-11-2007 01:17AM

TimTim

Registered Users, Registered Users 2 Posts: 804 ✭✭✭

Join Date: March 2003

Posts: 776

The only thing the DNS cache will store is the fact boards.ie 208.69.32.139

However if you were using a dubious DNS server, the person responsible for it could force it to serve mybank.ie to resolve to his own IP.

However setting it up so nobody would notice would be a difficult thing to do.

0