Re:Show HN: dingo - a Google DNS-over-HTTPS caching proxy in Go
by pjf on Friday September 16, 2016 @07:27PM
(#12518129)
Yes, the random padding (which is optional) is to counter-measure possible side-channel privacy attacks that could infer the domain name from the packet sizes.
The Google documentation explains that (look for "random_padding") at https://developers.google.com/speed/public-dns/docs/dns-over...