D 10: DNS Privacy (10 pts extra)

What You Need for This Project

Purpose

To examine the privacy risks of DNS in various contexts.

Installing Wireshark

If you don't already have it, download and install Wireshark from

https://wireshark.org

Monitoring "puppy" Packets

Launch Wireshark.

In the main Wireshark window, double-click Ethernet0, or whatever adapter connects to the Internet on your system, as shown below.

In the the "Capturing from Ethernet0" window, at the top left, in the "Apply a display filter" bar, type this:

frame contains "puppy"
and press Enter.

The filter bar turns green, as shown below.

Wireshark is now listening for any packets containing the word "puppy".

Using Unencrypted DNS

Open Edge. At the top right, click the three-dot icon. Click Settings.

In Settings, search for

secure dns
Click the toggle button to turn secure DNS off, as shown below.

Visiting Puppywar

In Edge, go to:

https://puppywar.com

as shown below.

DNS Privacy Exposure

Wireshark shows several DNS packets, showing what site you went to, as shown below.

If it's the first time you've visited puppywar, you'll also see some HTTP or TLS packets.

Monitoring DNS is a powerful network security measure. Many administrators were very concerned when encrypted DNS became popular.

Restarting the Wireshark Capture

In Wireshark, from the menu bar, click Capture, Restart.

Click "Continue without Saving".

Wireshark is listening for new "puppy" packets, as shown below.

Using Encrypted DNS

In Edge, at the top right, click the three-dot icon. Click Settings.

In Settings, search for

secure dns
Click the toggle button to turn secure DNS on, as shown below.

Visiting Weatherpuppy

In Edge, go to:

https://weatherpuppy.com

as shown below.

DNS Privacy

Wireshark shows no DNS packets, but you may see some TLS packets, as shown below.

Encrypted DNS has improved your privacy.

Flag D 10: flag10.samsclass.info (10 pts)

In a Command Prompt window, execute this command:
nslookup -q=TXT flag10.samsclass.info
The flag appears, covered by a green rectangle in the image below.

Posted 6-2-23