GOOGLE PUBLIC DNS’S APPROACH TO FIGHT AGAINST CACHE POISONING ATTACKS

Summary from the TLDR Web Dev newsletter

DNS cache poisoning attacks exploit weaknesses in DNS to redirect users to malicious sites. Google Public DNS protects against these attacks using a few techniques. It randomizes cases, altering the capitalization of domain names. This protects over 90% of Google Public DNS traffic. Google also uses DNS-over-TLS (ADoT) to encrypt communications with authoritative nameservers.