Dark Reading is part of the Informa Tech Division of Informa PLC

This site is operated by a business or businesses owned by Informa PLC and all copyright resides with them.Informa PLC's registered office is 5 Howick Place, London SW1P 1WG. Registered in England and Wales. Number 8860726.

Risk

2/14/2012
04:19 PM
Connect Directly
Google+
LinkedIn
Twitter
RSS
E-Mail
50%
50%

Google Becomes Largest Public DNS Provider

Search giant's DNS service, now handling 70 billion requests a day, also makes Google more knowledgeable about what people are doing online.

Office 365 Vs. Google Apps: Top 10 Enterprise Concerns
Office 365 Vs. Google Apps: Top 10 Enterprise Concerns
(click image for larger view and forslideshow)
Google has become the largest public DNS service in the world, an event that might either please or frighten you, depending on your view of Google.

The company launched Google Public DNS in December 2009 and on Tuesday said its service is handling more than 70 billion requests a day.

Google software engineer Jeremy K. Chen likens DNS to a phone book for the Internet, a comparison that presumes a familiarity with phone books that might be absent in many younger Internet users. "If you had to look up hundreds or thousands of phone numbers every day, you'd want a directory that was fast, secure and correct," he said in a blog post. "That's what Google Public DNS provides for tens of millions of people."

Although Google's stated goal with its DNS service might be to make the Internet faster, more secure, and more easily organized through search, its advertising business is likely to perform better as a consequence of that goal.

[ Networks aren't always friendly. Read 500 Malware Networks Available To Launch Attacks. ]

DNS stands for Domain Name System. It is a service that maps numeric 32-bit IPv4 and 128-bit IPv6 addresses, such as 74.125.224.72, to alphanumeric domain names such as Google.com.

Providers of DNS service have considerable power: They can disassociate domain names and IP addresses, making websites unreachable by those using domain names.

When DNS providers do so, it tends to be at the direction of law enforcement authorities. But such takedowns are not always considered just or well-executed. The recent controversy surrounding proposed anti-piracy bills SOPA and PIPA was partly because the draft legislation would have forced ISPs to implement DNS filtering to protect copyrighted content.

Cricket Liu, vice president of architecture at Infoblox, a maker of networking control hardware, says that whether one is concerned about Google's growing power as a DNS provider depends on whether one has a charitable or skeptical view of the company.

"Google is providing fast, unfiltered DNS," he said, "and all of that is good. But they're also grabbing this huge stream of data, generated by all those people who use the company's DNS service."

Having access to that information reveals a lot about what people do and where they go online, he said. Companies such as OpenDNS have recognized the value of DNS data and have built businesses by delivering paid advertising in place of a browser-generated error page when users mistype URLs and by providing additional security and filtering services.

Google states explicitly that Google Public DNS "never blocks, filters, or redirects users, unlike some open resolvers and ISPs."

However, Open DNS founder and CEO David Ulevitch took issue with this claim in a 2009 blog post. "Google claims that [its] service is better because it has no ads or redirection," he wrote. "But you have to remember they are also the largest advertising and redirection company on the Internet."

Google also maintains a separate privacy policy for Google Public DNS. The company says it maintains two sets of server logs related to the service: temporary and permanent. The temporary logs contain user IP addresses and those are deleted in 24 to 48 hours (barring a court order to the contrary). The permanent logs, which contain city-level location data but nothing personally identifiable, are retained for at least two weeks. A small random sample taken from the permanent logs is kept indefinitely.

Google says it does not share public DNS data with other services, though it's not clear whether this data firewall will persist after March 1, when Google consolidates its privacy policies. A Google spokesperson did not immediately respond to a request for comment.

Hacks of Comodo and DigiNotar exposed weakness in the Secure Sockets Layer protocol. The new Dark Reading supplement shows you what's being done to fix it. (Free registration required.)

Comment  | 
Print  | 
More Insights
Comments
Newest First  |  Oldest First  |  Threaded View
Michael Martinez
50%
50%
Michael Martinez,
User Rank: Apprentice
2/14/2012 | 10:35:28 PM
re: Google Becomes Largest Public DNS Provider
"Excuse me -- but WHY does God need a starship?"

How is it that Google is now the largest DNS provider in the world? They claim they service 70 billion DNS requests a day. Great!

How many requests are the OTHER DNS providers serving per day? I'd just like to see some official, trustworthy data, not more egregious marketing claims.

Thank you.
Microsoft Patches Wormable RCE Vulns in Remote Desktop Services
Kelly Sheridan, Staff Editor, Dark Reading,  8/13/2019
The Mainframe Is Seeing a Resurgence. Is Security Keeping Pace?
Ray Overby, Co-Founder & President at Key Resources, Inc.,  8/15/2019
GitHub Named in Capital One Breach Lawsuit
Dark Reading Staff 8/14/2019
Register for Dark Reading Newsletters
White Papers
Video
Cartoon Contest
Current Issue
7 Threats & Disruptive Forces Changing the Face of Cybersecurity
This Dark Reading Tech Digest gives an in-depth look at the biggest emerging threats and disruptive forces that are changing the face of cybersecurity today.
Flash Poll
The State of IT Operations and Cybersecurity Operations
The State of IT Operations and Cybersecurity Operations
Your enterprise's cyber risk may depend upon the relationship between the IT team and the security team. Heres some insight on what's working and what isn't in the data center.
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2019-15113
PUBLISHED: 2019-08-16
The companion-sitemap-generator plugin before 3.7.0 for WordPress has CSRF.
CVE-2019-15114
PUBLISHED: 2019-08-16
The formcraft-form-builder plugin before 1.2.2 for WordPress has CSRF.
CVE-2019-15115
PUBLISHED: 2019-08-16
The peters-login-redirect plugin before 2.9.2 for WordPress has CSRF.
CVE-2019-15116
PUBLISHED: 2019-08-16
The easy-digital-downloads plugin before 2.9.16 for WordPress has XSS related to IP address logging.
CVE-2017-18547
PUBLISHED: 2019-08-16
The nelio-ab-testing plugin before 4.6.4 for WordPress has CSRF in experiment forms.