{
  "$schema": "/api/schemas/documents.schema.json",
  "apiVersion": "1.1.0",
  "lastModified": "2026-10-20T21:16:33.880Z",
  "sourcePath": "src/main/data/docs",
  "docId": "RFC7858",
  "document": {
    "abstract": "This document describes the use of Transport Layer Security (TLS) to provide privacy for DNS. Encryption provided by TLS eliminates opportunities for eavesdropping and on-path tampering with DNS queries in the network, such as discussed in RFC 7626. In addition, this document specifies two usage profiles for DNS over TLS and provides advice on performance considerations to minimize overhead from using TCP and TLS with DNS. This document focuses on securing stub-to-recursive traffic, as per the charter of the DPRIVE Working Group. It does not prevent future applications of the protocol to recursive-to-authoritative traffic.",
    "abstract$meta": {
      "confidence": "high",
      "note": "Parsed from RFC index XML abstract",
      "originalValue": null,
      "source": "parsed",
      "sourceUrl": "https://www.rfc-editor.org/info/rfc7858/",
      "updated": "2026-10-20T17:31:52.245Z",
      "version": "extractDocs.js@commit:8277ba975118"
    },
    "authors": [
      {
        "name": "Zi Hu"
      },
      {
        "name": "Liang Zhu"
      },
      {
        "name": "John Heidemann"
      },
      {
        "name": "Allison Mankin"
      },
      {
        "name": "Duane Wessels"
      },
      {
        "name": "Paul E. Hoffman"
      }
    ],
    "authors$meta": {
      "confidence": "high",
      "note": "Parsed from Datatracker doc page article:author (profile full names)",
      "originalValue": null,
      "source": "parsed",
      "sourceUrl": "https://www.rfc-editor.org/info/rfc7858/",
      "updated": "2026-10-20T17:31:52.245Z",
      "version": "extractDocs.js@commit:8277ba975118"
    },
    "docId": "RFC7858",
    "docId$meta": {
      "confidence": "high",
      "note": "Derived from RFC number or Datatracker identifier",
      "originalValue": null,
      "source": "resolved",
      "sourceUrl": "https://www.rfc-editor.org/info/rfc7858/",
      "updated": "2026-10-20T17:31:52.245Z",
      "version": "extractDocs.js@commit:8277ba975118"
    },
    "docLabel": "IETF RFC 7858",
    "docLabel$meta": {
      "confidence": "high",
      "note": "Constructed from provider and document identifier",
      "originalValue": null,
      "source": "resolved",
      "sourceUrl": "https://www.rfc-editor.org/info/rfc7858/",
      "updated": "2026-10-20T17:31:52.245Z",
      "version": "extractDocs.js@commit:8277ba975118"
    },
    "docNumber": "7858",
    "docNumber$meta": {
      "confidence": "high",
      "note": "From the RFC index entry (rfc-index.xml <doc-id>)",
      "originalValue": null,
      "source": "parsed",
      "sourceUrl": "https://www.rfc-editor.org/info/rfc7858/",
      "updated": "2026-10-20T17:31:52.245Z",
      "version": "extractDocs.js@commit:8277ba975118"
    },
    "docTitle": "Specification for DNS over Transport Layer Security (TLS)",
    "docTitle$meta": {
      "confidence": "high",
      "note": "Parsed from RFC index XML title",
      "originalValue": null,
      "source": "parsed",
      "sourceUrl": "https://www.rfc-editor.org/info/rfc7858/",
      "updated": "2026-10-20T17:31:52.245Z",
      "version": "extractDocs.js@commit:8277ba975118"
    },
    "docType": "Standard",
    "docType$meta": {
      "confidence": "high",
      "note": "Mapped from Datatracker std_level or RFC status text",
      "originalValue": null,
      "source": "parsed",
      "sourceUrl": "https://www.rfc-editor.org/info/rfc7858/",
      "updated": "2026-10-20T17:31:52.245Z",
      "version": "extractDocs.js@commit:8277ba975118"
    },
    "doi": "10.17487/RFC7858",
    "doi$meta": {
      "confidence": "high",
      "note": "Parsed from RFC index XML doi",
      "originalValue": null,
      "source": "resolved",
      "sourceUrl": "https://www.rfc-editor.org/info/rfc7858/",
      "updated": "2026-10-20T17:31:52.245Z",
      "version": "extractDocs.js@commit:8277ba975118"
    },
    "href": "https://doi.org/10.17487/RFC7858",
    "href$meta": {
      "confidence": "high",
      "note": "Derived from DOI (https://doi.org/<doi>)",
      "originalValue": null,
      "source": "resolved",
      "sourceUrl": "https://www.rfc-editor.org/info/rfc7858/",
      "updated": "2026-10-20T17:31:52.245Z",
      "version": "extractDocs.js@commit:8277ba975118"
    },
    "keywords": [
      "DNS Privacy"
    ],
    "keywords$meta": {
      "confidence": "high",
      "note": "Parsed from RFC index XML keywords",
      "originalValue": [
        "DNS Encryption",
        "DNS Privacy"
      ],
      "overridden": true,
      "source": "parsed",
      "sourceUrl": "https://www.rfc-editor.org/info/rfc7858/",
      "updated": "2026-10-20T21:16:33.880Z",
      "version": "extractDocs.js@commit:2d729ed26f61"
    },
    "pages": "19",
    "pages$meta": {
      "confidence": "high",
      "note": "Parsed from RFC index XML page-count",
      "originalValue": null,
      "source": "parsed",
      "sourceUrl": "https://www.rfc-editor.org/info/rfc7858/",
      "updated": "2026-10-20T17:31:52.245Z",
      "version": "extractDocs.js@commit:8277ba975118"
    },
    "publicationDate": "2016-05-01",
    "publicationDate$meta": {
      "confidence": "high",
      "note": "Parsed from RFC index XML date",
      "originalValue": null,
      "source": "parsed",
      "sourceUrl": "https://www.rfc-editor.org/info/rfc7858/",
      "updated": "2026-10-20T17:31:52.245Z",
      "version": "extractDocs.js@commit:8277ba975118"
    },
    "publisher": "IETF",
    "publisher$meta": {
      "confidence": "high",
      "note": "Static: provider",
      "originalValue": null,
      "source": "parsed",
      "sourceUrl": "https://www.rfc-editor.org/info/rfc7858/",
      "updated": "2026-10-20T17:31:52.245Z",
      "version": "extractDocs.js@commit:8277ba975118"
    },
    "references": {
      "bibliographic": [
        "IETF.draft-wijngaards-dnsop-confidentialdns-03",
        "IETF.draft-dempsky-dnscurve-01",
        "IETF.draft-ietf-dprive-dnsodtls-06",
        "IETF.draft-osterweil-dane-ipsec-03",
        "RFC3234",
        "RFC3646",
        "RFC4033",
        "RFC7258",
        "RFC7413",
        "RFC7435",
        "RFC7626",
        "RFC7828",
        "RFC7830",
        "10.1109-SP.2015.18",
        "IETF.draft-ietf-dprive-dtls-and-tls-profiles-01",
        "IETF.draft-ietf-tls-falsestart-02",
        "orphan/RFC7858/h:fa917e10",
        "orphan/RFC7858/h:b2144b0b"
      ],
      "bibliographic$meta": {
        "confidence": "medium",
        "flag": "MIXED_REF_LAYOUT_RISK anchored=30 proseBlocks=40 skippedAnchorBlocks=34",
        "note": "Parsed from RFC HTML references/informative sections",
        "originalValue": [],
        "reviewRequired": true,
        "source": "parsed",
        "sourceUrl": "https://www.rfc-editor.org/info/rfc7858/",
        "updated": "2026-10-20T17:31:52.245Z",
        "version": "extractDocs.js@commit:8277ba975118"
      },
      "normative": [
        "RFC7525",
        "RFC1034",
        "RFC1035",
        "RFC2119",
        "RFC4648",
        "RFC5077",
        "RFC5246",
        "RFC6234",
        "RFC6335",
        "RFC7120",
        "RFC7469",
        "RFC7766"
      ],
      "normative$meta": {
        "confidence": "high",
        "note": "Parsed from RFC HTML normative references sections",
        "originalValue": [],
        "source": "parsed",
        "sourceUrl": "https://www.rfc-editor.org/info/rfc7858/",
        "updated": "2026-10-20T17:31:52.245Z",
        "version": "extractDocs.js@commit:8277ba975118"
      }
    },
    "resolvedHref": "https://www.rfc-editor.org/info/rfc7858/",
    "resolvedHref$meta": {
      "confidence": "high",
      "note": "Final URL resolved via URL redirect verification",
      "originalValue": null,
      "source": "resolved",
      "sourceUrl": "https://www.rfc-editor.org/info/rfc7858/",
      "updated": "2026-10-20T17:31:52.245Z",
      "version": "extractDocs.js@commit:8277ba975118"
    },
    "status": {
      "active": true,
      "active$meta": {
        "confidence": "high",
        "note": "Derived from supersession relationship fields",
        "originalValue": null,
        "source": "resolved",
        "sourceUrl": "https://www.rfc-editor.org/info/rfc7858/",
        "updated": "2026-10-20T17:31:52.245Z",
        "version": "extractDocs.js@commit:8277ba975118"
      },
      "amendedBy": [
        "RFC8310"
      ],
      "amendedBy$meta": {
        "confidence": "high",
        "note": "Parsed from RFC index XML",
        "originalValue": [],
        "source": "parsed",
        "sourceUrl": "https://www.rfc-editor.org/info/rfc7858/",
        "updated": "2026-10-20T17:31:52.245Z",
        "version": "extractDocs.js@commit:8277ba975118"
      },
      "errataExist": true,
      "errataExist$meta": {
        "confidence": "high",
        "note": "Derived from presence of errata links on RFC/Datatracker pages",
        "originalValue": null,
        "source": "parsed",
        "sourceUrl": "https://www.rfc-editor.org/info/rfc7858/",
        "updated": "2026-10-20T17:31:52.245Z",
        "version": "extractDocs.js@commit:8277ba975118"
      },
      "errataUrl": [
        "https://www.rfc-editor.org/errata/rfc7858",
        "https://www.rfc-editor.org/errata_search.php?rfc=7858"
      ],
      "errataUrl$meta": {
        "confidence": "high",
        "note": "Parsed from errata links on RFC/Datatracker pages",
        "originalValue": [],
        "source": "parsed",
        "sourceUrl": "https://www.rfc-editor.org/info/rfc7858/",
        "updated": "2026-10-20T17:31:52.245Z",
        "version": "extractDocs.js@commit:8277ba975118"
      },
      "latestVersion": true,
      "latestVersion$meta": {
        "confidence": "high",
        "note": "Derived from supersession relationship fields",
        "originalValue": null,
        "source": "resolved",
        "sourceUrl": "https://www.rfc-editor.org/info/rfc7858/",
        "updated": "2026-10-20T17:31:52.245Z",
        "version": "extractDocs.js@commit:8277ba975118"
      },
      "statusNote": "Proposed Standard",
      "statusNote$meta": {
        "confidence": "high",
        "note": "Mapped from Datatracker doc.json std_level",
        "originalValue": null,
        "source": "parsed",
        "sourceUrl": "https://www.rfc-editor.org/info/rfc7858/",
        "updated": "2026-10-20T17:31:52.245Z",
        "version": "extractDocs.js@commit:8277ba975118"
      },
      "superseded": false,
      "superseded$meta": {
        "confidence": "high",
        "note": "Derived from supersession relationship fields",
        "originalValue": null,
        "source": "resolved",
        "sourceUrl": "https://www.rfc-editor.org/info/rfc7858/",
        "updated": "2026-10-20T17:31:52.245Z",
        "version": "extractDocs.js@commit:8277ba975118"
      }
    }
  }
}