Abstract

RFC 7858: Specification for DNS over Transport Layer Security (TLS) [RFC Home] [TEXT|PDF|HTML] [Tracker] [IPR] [Errata] [Info page] PROPOSED STANDARD Updated by: 8310 Errata Exist Internet Engineering Task Force (IETF) Z. Hu Request for Comments: 7858 L. Zhu Category: Standards Track J. Heidemann ISSN: 2070-1721 USC/ISI A. Mankin Independent D. Wessels Verisign Labs P. Hoffman ICANN May 2016 Specification for DNS over Transport Layer Security (TLS) Abstract This document describes the use of Transport Layer Security (TLS) to provide privacy for DNS. Encryption provided by TLS eliminates opportunities for eavesdropping and on-path tampering with DNS queries in the network, such as discussed in RFC 7626. In addition, this document specifies two usage profiles for DNS over TLS and provides advice on performance considerations to minimize overhead from using TCP and TLS with …

Date

2016

Authors

Zhu Hu, Liang Zhu, John Heidemann, Allison Mankin, Duane Wessels, Paul Hoffman

Issue

rfc7858