REN-ISAC Advisory: Upcoming Browser DNS Changes and Impact to University IT Operations

[Doug Pearson <dodpears () REN-ISAC NET>]

SHARING GUIDELINE: PUBLIC (TLP:WHITE)

Greetings,

The REN-ISAC has issued the attached advisory to call attention to the upcoming implementation of DNS over HTTPS (DoH) 
in Firefox and Chrome browsers. The changes to how the browsers conduct domain name resolution will impact your users 
and IT security and operations.

We recommend institutions understand how:

 + domain name resolution is conducted at their institution
 + DNS choices can impact user privacy and security
 + IT security operations and protections may be impacted
 + user support may be impacted
 + reliability, availability, and performance may be impacted

and, to 

 + determine whether you want to allow, discourage, or disallow use of alternative DoH recursive resolvers at your 
institution
 + communicate with your users.

Many thanks go to the REN-ISAC Technical Advisory Group [1] for assistance in developing this advisory.

Questions or comments can be referred to soc () ren-isac net.


On behalf of the REN-ISAC team,
Doug Pearson
Technical Director, REN-ISAC

[1] https://www.ren-isac.net/about/governance/tag.html

-o0o-

**********
Replies to EDUCAUSE Community Group emails are sent to the entire community list. If you want to reply only to the 
person who sent the message, copy and paste their email address and forward the email reply. Additional participation 
and subscription information can be found at https://www.educause.edu/community

Attachment: REN-ISAC_DoH_Advisory_20190920.pdf
Description:

Attachment: signature.asc
Description: OpenPGP digital signature