Skip to content

CODoH: Privacy-Preserving Caching for Oblivious DNS over HTTPS#

PETS 2026 digest Program Core pick 20–25 July 2026

Authors: Pankaj Niroula (William & Mary), Lily Gloudemans (William & Mary), Aashutosh Poudel (William & Mary), Collin MacDonald (William & Mary), Stephen Herwig (William & Mary)

Play the recording: CODoH: Privacy-Preserving Caching for Oblivious DNS over HTTPS

  • Why: ODoH's fatal flaw for deployment is that relaying through an oblivious proxy destroys resolver-side caching, inflating latency and cost. Solving cache while preserving obliviousness is a real distributed-systems problem at the heart of privacy-preserving network infrastructure — the same tension as anonymous credentials vs. CDN economics.
  • What: Apparently a mechanism that restores caching benefits for ODoH without letting the resolver or proxy link queries to clients (title/author line only — no abstract in program).
  • How: Not described in the program; plausible routes are oblivious caching (private information retrieval over cache contents) or cache-shared constructions where hit/miss patterns don't leak identity. Herwig's group works in network measurement and systems security, so expect implementation and latency evaluation.
  • Where applicable: DNS resolution infrastructure — DoH/ODoH deployments, corporate resolvers, privacy-relay services. Broadly applicable to any CDN/caching service that wants unlinkability, not DNS-specific in concept.