I-D Action: draft-dukhovni-tls-dnssec-chain-06.txt

internet-drafts@ietf.org Mon, 31 May 2021 20:24 UTC

Return-Path: <internet-drafts@ietf.org>
X-Original-To: i-d-announce@ietf.org
Delivered-To: i-d-announce@ietfa.amsl.com
Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id EC3F93A2559 for <i-d-announce@ietf.org>; Mon, 31 May 2021 13:24:52 -0700 (PDT)
MIME-Version: 1.0
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: 7bit
From: internet-drafts@ietf.org
To: i-d-announce@ietf.org
Subject: I-D Action: draft-dukhovni-tls-dnssec-chain-06.txt
X-Test-IDTracker: no
X-IETF-IDTracker: 7.30.0
Auto-Submitted: auto-generated
Precedence: bulk
Message-ID: <162249269288.23736.16075488325130039719@ietfa.amsl.com>
Date: Mon, 31 May 2021 13:24:52 -0700
Archived-At: <https://mailarchive.ietf.org/arch/msg/i-d-announce/mc-K9TIzpcB9MCGYHozxBkVkYQA>
X-BeenThere: i-d-announce@ietf.org
X-Mailman-Version: 2.1.29
List-Id: Internet Draft Announcements only <i-d-announce.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/i-d-announce>, <mailto:i-d-announce-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/i-d-announce/>
List-Post: <mailto:i-d-announce@ietf.org>
List-Help: <mailto:i-d-announce-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/i-d-announce>, <mailto:i-d-announce-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 31 May 2021 20:24:53 -0000

A New Internet-Draft is available from the on-line Internet-Drafts directories.


        Title           : TLS DNSSEC Chain Extension
        Authors         : Viktor Dukhovni
                          Shumon Huque
                          Willem Toorop
                          Paul Wouters
                          Melinda Shore
	Filename        : draft-dukhovni-tls-dnssec-chain-06.txt
	Pages           : 36
	Date            : 2021-05-31

Abstract:
   This document describes an experimental TLS extension for in-band
   transport of the complete set of DNSSEC validated records needed to
   perform DANE authentication of a TLS server without the need to
   perform separate out-of-band DNS lookups.  When the requisite DNS
   records do not exist, the extension conveys a validated denial of
   existence proof.

   This experimental extension is developed outside the IETF and is
   published here to guide implementation of the extension and to ensure
   interoperability among implementations.


The IETF datatracker status page for this draft is:
https://datatracker.ietf.org/doc/draft-dukhovni-tls-dnssec-chain/

There is also an HTML version available at:
https://www.ietf.org/archive/id/draft-dukhovni-tls-dnssec-chain-06.html

A diff from the previous version is available at:
https://www.ietf.org/rfcdiff?url2=draft-dukhovni-tls-dnssec-chain-06


Internet-Drafts are also available by anonymous FTP at:
ftp://ftp.ietf.org/internet-drafts/