DNS cache snooping

DNS cache snooping

DNS cache snooping is when someone queries a DNS server in order to find out (snoop) DNS cache snooping if the DNS server has a specific DNS record cached, and thereby deduce if the DNS server's owner (or its users) have recently visited a specific site. new pc world

This may reveal information about the DNS server's owner, such as what vendor, bank, DNS cache snooping service provider, etc. new pc world

 they use. Especially if this is confirmed (snooped) multiple times new pc world over a period.

This method could even be used to gather statistical information - DNS cache snooping for example at what time does the DNS server's owner typically access his net bank etc.

The cached DNS record's remaining TTL value can provide very accurate data for this. new pc world

DNS cache snooping is possible even if the DNS server is not configured to resolve recursively for 3rd parties, as long as it provides records from the cache also to 3rd parties (a.k.a. "lame requests"). DNS cache snooping