End-users are concerned about protecting the privacy of their personal data generated while working on information systems. This extends to both the data they actively provide including personal identification in exchange for products and services as well as its related metadata such as unnecessary access to location. This is where Internet Engineering Task Force (IETF) plays a major role by incorporating privacy on the evolving new technologies at the fundamental level. Thus, this paper offers an overview of the privacy-preserving mechanisms under standardization at the IETF including DNS-over-TLS (DoT), DNS-over-HTTP (DoH) and DNS-over-QUIC (DoQ) classified as DNS encryption. The paper also discusses Privacy Pass Protocol and its application in generating Private Access Tokens and Passkeys to replace passwords for authentication at the end-user's devices. To further protect the user privacy at the IP level, Private Relays and MASQUE are discussed. This aims to make designers, implementers and users of the Internet aware about the privacy-related design choices.
翻译:最终用户对信息系统工作期间产生的个人数据的隐私保护感到关切,这包括他们积极提供的数据,包括以个人身份交换产品和服务的数据,以及相关元数据,如不必要地进入地点等,因特网工程工作队(IETF)在这方面发挥了重要作用,在基本层面纳入了不断发展的新技术的隐私,因此,本文件概述了在IETF标准化下的隐私保护机制,包括DNS-over-TLS(DoT)、DNS-over-HTTP(DoH)和DNS-over-QUIC(DoQ),分类为DNS-加密。该文件还讨论了隐私通行证协议及其在生成私人访问托肯和密码以取代终端用户装置认证密码方面的应用。为了进一步保护IP一级的用户隐私,讨论了私人再lays和MAQUE。其目的是让互联网的设计者、实施者和用户了解与隐私有关的设计选择。