RFC 7816: DNS query name minimisation
DNS queries can contain a lot of sensitive information about your users. Query name minimisation (QNAME) limits the information revealed to what is actually necessary for a DNS name server to answer the query.
When an application uses the DNS to look up the IP address of a domain name, it uses the domain’s full name.
The DNS query name minimisation objective is :
- Data Minimization: Reducing the amount of data exchanged reduces the amount of data that can be misused or leaked
- Security: Keeping data secret from unintended listeners
To enable , turn on the option DNS query name minimisation
