Skip to content
OpenTrain AIFor AI Companies

Oblivious DNS over HTTPS (ODoH): A Practical Privacy Enhancement to DNS

Sudheesh Singanamalla, Suphanat Chunhapanya, Marek Vavruša, Tanya Verma, Peter Wu +4 morePublished Nov 19, 2020
arXiv PDF
Researcher verdict
Starting point
Use as implementation starting point
Benchmark evidence
Missing
Not verified yet
Time to first repro
A few days
Plan setup time
Risk flags
1
Review before use

Abstract

Domain fit: AI-adjacent · Paper appears method- or tooling-adjacent to AI workflows with partial ecosystem coverage.

The Domain Name System (DNS) is the foundation of a human-usable Internet, responding to client queries for host-names with corresponding IP addresses and records. Traditional DNS is also unencrypted, and leaks user information to network operators. Recent efforts to secure DNS using DNS over TLS (DoT) and DNS over HTTPS (DoH) have been gaining traction, ostensibly protecting traffic and hiding content from on-lookers. However, one of the criticisms of DoT and DoH is brought to bear by the small number of large-scale deployments (e.g., Comcast, Google, Cloudflare): DNS resolvers can associate query contents with client identities in the form of IP addresses. Oblivious DNS over HTTPS(ODoH) safeguards against this problem. In this paper we ask what it would take to make ODoH practical? We describe ODoH, a practical DNS protocol aimed at resolving this issue by both protecting the client's content and identity. We implement and deploy the protocol, and perform measurements to show that ODoH has comparable performance to protocols like DoH and DoT which are gaining widespread adoption, while improving client privacy, making ODoH a practical privacy enhancing replacement for the usage of DNS.

Results and benchmarks

Freshness tier: cold
The Domain Name System (DNS) is the foundation of a human-usable Internet, responding to client queries for host-names with corresponding IP addresses and records.

Implementation

Best maintained implementation now

Recommended
Confidence: High
Reproducibility: Moderate
cloudflare/odoh-rs

Oblivious DoH library in Rust

190 stars · 27 forks · Last push Jul 15, 2026 · BSD-2-Clause license

  • License
  • CI
  • Dependencies
  • Docker

Official implementation from Papers with Code · Partial overlap with paper title keywords · Community adoption signal (190 stars)

Why this implementation
Confidence: high

cloudflare/odoh-rs is the strongest maintained implementation based on ranking signals. CI workflows are present. License is declared (BSD-2-Clause).

Open cloudflare/odoh-rs
Reproduction risks
  • Dependency manifest is missing
  • Selected cloudflare/odoh-rs as the strongest maintained implementation for new work.
  • Includes CI workflow signals.
  • Repository activity is within the last 24 months.
  • Official repository is preserved separately as historical context.

Compare implementation paths

Compare maintenance quality, reproducibility coverage, and evidence confidence before choosing a reproduction baseline.

cloudflare/odoh-rs
best maintained
Maintenance
Recently updated
Confidence
High
Reproducibility
Moderate
Stars
190
Last push
Jul 15, 2026 (41d)

Official implementation from Papers with Code · Partial overlap with paper title keywords

  • No Docker setup
  • Dependency manifest missing
cloudflare/odoh-client-rs
historical official
Maintenance
Recently updated
Confidence
High
Reproducibility
Moderate
Stars
73
Last push
Apr 23, 2026 (124d)

Official implementation from Papers with Code · Partial overlap with paper title keywords

  • No Docker setup
  • Dependency manifest missing
cloudflarearchive/odoh-server-go
alternative
Maintenance
Stale
Confidence
High
Reproducibility
Moderate
Stars
66
Last push
Apr 17, 2022 (1591d)

Official implementation from Papers with Code · Partial overlap with paper title keywords

  • No push in 12+ months
  • No Docker setup
  • Dependency manifest missing

Reproduction readiness

Time to first repro: days
Last checked: Aug 24, 2026

Major work

No dependency manifest, manual reconstruction required

  • cloudflare/odoh-rs has no requirements.txt, environment.yml, pyproject.toml, or Dockerfile.
  • You will need to reverse-engineer dependencies from import statements in the source code.
Open cloudflare/odoh-rs

Hardware requirements

  • Expect multi-day setup/compute for meaningful reproduction based on current guidance.

Repositories and ecosystem

Official

Community

No additional community repositories detected yet.

Hugging Face artifacts

No direct paper-linked artifacts were found. Showing strongest curated related artifacts for faster exploration.

Models

Curated Related

Broaden model search

oblivious over https odoh

Datasets

No trustworthy datasets matches right now.

Search datasets on Hugging Face

Spaces

No trustworthy spaces matches right now.

Search spaces on Hugging Face

Research context

Evaluation and human feedback data

Open this paper in HFEPX to review benchmark signals, evaluation modes, and human-feedback protocol context.

Open in HFEPX

Data includes links from Papers with Code ( CC-BY-SA-4.0 ).