Intent to Implement: Secure DNS Enhanced Bootstrap

[Benjamin Schwartz]

Contact emails

bem...@chromium.org, net...@chromium.org

Design doc

https://docs.google.com/document/d/1OBiAK9bfFNfmezP-trlAL6v5kz1D0xXCg_nmcSM2so8/edit?usp=sharing

Summary

Currently, Chrome’s Secure DNS functionality only works if the network’s DNS resolver is correctly functioning and able to resolve the domain.  This design outlines steps to reduce Secure DNS’s reliance on the network’s resolver.  This should improve the reliability of Secure DNS, especially if the network’s resolver is experiencing an outage.

This change has no impact on resolver selection.  Captive portal detection and users of ISP DNS filtering are not expected to be affected.

Implementation bug

https://crbug.com/1200908