CODoH: Privacy-Preserving Caching for Oblivious DNS over HTTPS#
PETS 2026 digest Program Core pick 20–25 July 2026
Authors: Pankaj Niroula (William & Mary), Lily Gloudemans (William & Mary), Aashutosh Poudel (William & Mary), Collin MacDonald (William & Mary), Stephen Herwig (William & Mary)
- Why: ODoH's fatal flaw for deployment is that relaying through an oblivious proxy destroys resolver-side caching, inflating latency and cost. Solving cache while preserving obliviousness is a real distributed-systems problem at the heart of privacy-preserving network infrastructure — the same tension as anonymous credentials vs. CDN economics.
- What: Apparently a mechanism that restores caching benefits for ODoH without letting the resolver or proxy link queries to clients (title/author line only — no abstract in program).
- How: Not described in the program; plausible routes are oblivious caching (private information retrieval over cache contents) or cache-shared constructions where hit/miss patterns don't leak identity. Herwig's group works in network measurement and systems security, so expect implementation and latency evaluation.
- Where applicable: DNS resolution infrastructure — DoH/ODoH deployments, corporate resolvers, privacy-relay services. Broadly applicable to any CDN/caching service that wants unlinkability, not DNS-specific in concept.
