[dns-privacy] I-D Action: draft-ietf-dprive-dns-over-tls-07.txt

internet-drafts@ietf.org Tue, 01 March 2016 20:35 UTC

Return-Path: <internet-drafts@ietf.org>
X-Original-To: dns-privacy@ietf.org
Delivered-To: dns-privacy@ietfa.amsl.com
Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id 5CD1B1B416D; Tue, 1 Mar 2016 12:35:18 -0800 (PST)
MIME-Version: 1.0
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: 7bit
From: internet-drafts@ietf.org
To: i-d-announce@ietf.org
X-Test-IDTracker: no
X-IETF-IDTracker: 6.15.0
Auto-Submitted: auto-generated
Precedence: bulk
Message-ID: <20160301203518.14794.45552.idtracker@ietfa.amsl.com>
Date: Tue, 01 Mar 2016 12:35:18 -0800
Archived-At: <http://mailarchive.ietf.org/arch/msg/dns-privacy/DDWAPuuTOv1jbWbVUAPKaEtTxik>
Cc: dns-privacy@ietf.org
Subject: [dns-privacy] I-D Action: draft-ietf-dprive-dns-over-tls-07.txt
X-BeenThere: dns-privacy@ietf.org
X-Mailman-Version: 2.1.15
List-Id: <dns-privacy.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/dns-privacy>, <mailto:dns-privacy-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/dns-privacy/>
List-Post: <mailto:dns-privacy@ietf.org>
List-Help: <mailto:dns-privacy-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dns-privacy>, <mailto:dns-privacy-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 01 Mar 2016 20:35:18 -0000

A New Internet-Draft is available from the on-line Internet-Drafts directories.
This draft is a work item of the DNS PRIVate Exchange of the IETF.

        Title           : Specification for DNS over TLS
        Authors         : Zi Hu
                          Liang Zhu
                          John Heidemann
                          Allison Mankin
                          Duane Wessels
                          Paul Hoffman
	Filename        : draft-ietf-dprive-dns-over-tls-07.txt
	Pages           : 20
	Date            : 2016-03-01

Abstract:
   This document describes the use of TLS to provide privacy for DNS.
   Encryption provided by TLS eliminates opportunities for eavesdropping
   and on-path tampering with DNS queries in the network, such as
   discussed in [RFC7258].  In addition, this document specifies two
   usage profiles for DNS-over-TLS and provides advice on performance
   considerations to minimize overhead from using TCP and TLS with DNS.

   This document focuses on securing stub-to-recursive traffic, as per
   the charter of the DPRIVE working group.  It does not prevent future
   applications of the protocol to recursive-to-authoritative traffic.

   Note: this document was formerly named
   draft-ietf-dprive-start-tls-for-dns.  Its name has been changed to
   better describe the mechanism now used.  Please refer to working
   group archives under the former name for history and previous
   discussion.  [RFC Editor: please remove this paragraph prior to
   publication]


The IETF datatracker status page for this draft is:
https://datatracker.ietf.org/doc/draft-ietf-dprive-dns-over-tls/

There's also a htmlized version available at:
https://tools.ietf.org/html/draft-ietf-dprive-dns-over-tls-07

A diff from the previous version is available at:
https://www.ietf.org/rfcdiff?url2=draft-ietf-dprive-dns-over-tls-07


Please note that it may take a couple of minutes from the time of submission
until the htmlized version and diff are available at tools.ietf.org.

Internet-Drafts are also available by anonymous FTP at:
ftp://ftp.ietf.org/internet-drafts/