IoT DNS Security and Privacy with UCL and Inria

This research report from UCL and Inria examines DNS behavior in 30 consumer IoT devices and identifies multiple security and operational weaknesses—lack of encrypted DNS, hardcoded resolvers, predictable source ports/transaction IDs, absence of DNSSEC, TTL misuse, and EDNS0 fragmentation problems—and recommends actionable mitigations for manufacturers, network operators, and standards bodies (adopt encrypted DNS, allow configurable resolvers, randomize DNS fields, support DNSSEC/EDNS0, publish management domains, and reference IETF guidance).