# Exploring the Ecosystem of DNS HTTPS Resource Records: An End-to-End Perspective

arXiv: https://arxiv.org/abs/2403.15672 · HTML: https://mlsanity.com/paper/2403.15672/

## Key facts

- Cited by 1 papers in the map (data through 14 Oct 2026).
- First posted on arXiv 23 Mar 2024.

## Built on by (most cited first, 1 of 1)

- [BGA: A noise-immune neural distillation framework for malicious signature extraction in high-entropy encrypted flows](https://mlsanity.com/paper/2608.14126/) (2026)

## Abstract (arXiv)

The DNS HTTPS resource record is a new DNS record type designed for the delivery of configuration information and parameters required to initiate connections to HTTPS network services. In addition, it is a key enabler for TLS Encrypted ClientHello (ECH) by providing the cryptographic keying material needed to encrypt the initial exchange. To understand the adoption of this new DNS HTTPS record, we perform a longitudinal study on the server-side deployment of DNS HTTPS for Tranco top million domains, as well as an analysis of the client-side support for DNS HTTPS through snapshots from major browsers. To the best of our knowledge, our work is the first longitudinal study on DNS HTTPS server deployment, and the first known study on client-side support for DNS HTTPS. Despite the rapidly growing trend of DNS HTTPS adoption, our study highlights challenges and concerns in the deployment by both servers and clients, such as the complexity in properly maintaining HTTPS records and connection failure in browsers when the HTTPS record is not properly configured.