Skip to main content
zenodoopen

List of DNS over HTTPS resolvers on the internet

<p>The DoH Internet Servers dataset comprises a verified list of Internet servers offering DNS over HTTPS (DoH) service. The list was created by active scanning of the IPv4 address space. The scanning was done two times in April&nbsp;2021 and in January 2022. Together, the list contains&nbsp;1987 different IP addresses with their reverse DNS record (if available), supported DoH method, and TLS 1.3 support.&nbsp;</p> <p>The scanning was done in three phases:</p> <ol> <li>We scanned the IPv4 address space&nbsp;for opened port 443 using masscan.&nbsp;</li> <li>IP addresses found in the previous step were scanned for DoH support using a custom Nmap-NSE script.</li> <li>The IP addresses found in previous steps were reached by a slower python script that also validated responses, obtained domain names.</li> </ol> <p>&nbsp;</p> <p><strong>Scanning limitation:&nbsp;</strong>The main limitation of our scanning was that it could not find DoH resolvers hosted on infrastructures hosting multiple services behind a single IP address. In such cases, an SNI, or HTTP Host header, or HTTP/2 <em>:authority</em>&nbsp;header is needed for a successful request. Since we did not have the SNI, it was impossible to provide it.&nbsp;</p> <p><strong>Used Scripts:</strong></p> <p>NMap: https://github.com/cejkato2/dns-doh.nse<br> Python:&nbsp;https://github.com/hynekkar/DoH-Checker</p> <p>&nbsp;</p> <p>&nbsp;</p> <p>&nbsp;</p>

ShareScore

40/100

Overall dataset sharing score

Score breakdown

These five areas show where the dataset supports — or may limit — practical reuse.

Stewardship
8
Harmonization
4
Access
20
Reuse readiness
8
Engagement
0

Topics