DNS over Datagram Transport Layer Security (DTLS)

Metadata

Publisher: IETF
Doc Type: Experimental
Pages: 13
Abstract: DNS queries and responses are visible to network elements on the path between the DNS client and its server. These queries and responses can contain privacy-sensitive information, which is valuable to protect. This document proposes the use of Datagram Transport Layer Security (DTLS) for DNS, to protect against passive listeners and certain active attacks. As latency is critical for DNS, this proposal also discusses mechanisms to reduce DTLS round trips and reduce the DTLS handshake size. The proposed mechanism runs over port 853.
Publication Date: 2017-02-01
Status Note: Experimental
DOI: 10.17487/RFC8094
Link: https://doi.org/10.17487/RFC8094
Author(s): Tirumaleswar Reddy.K
Dan Wing
Prashanth Patil

Latest version of IETF RFC 8094

Document Versions — IETF RFC 8094

▶ IETF RFC 8094 (2017-02-01)

THIS DOC [ACTIVE] [LATEST VERSION]

Normative Reference(s)

IETF RFC 1034 [Active*]
IETF RFC 1035 [Active, Amended*]
IETF RFC 2119 [Active*]
IETF RFC 4033 [Active*]
IETF RFC 5077 [Superseded*]
IETF RFC 5452 [Active*]
IETF RFC 6347 [Superseded*]
IETF RFC 6520 [Active*]
IETF RFC 6891 [Active*]
IETF RFC 7525 [Superseded*]
IETF RFC 7830 [Active*]

Bibliographic Reference(s)

IETF.draft-ietf-dprive-dtls-and-tls-profiles-08 — DTLS EXTERNAL
IETF.draft-rescorla-tls-dtls13-00 — DTLS13 EXTERNAL
IETF RFC 1122 [Active*]
IETF RFC 6066 [Active*]
IETF RFC 6335 [Active*]
IETF RFC 6960 [Active*]
IETF RFC 7250 [Active*]
IETF RFC 7413 [Active*]
IETF RFC 7626 [Superseded*]
IETF RFC 7766 [Active*]
IETF RFC 7858 [Active*]
IETF RFC 7918 [Active*]
IETF RFC 7924 [Active*]

Source Data (JSON)

Full registry record with provenance metadata. Open directly: /api/doc/RFC8094.json

Reference Tree

Explore all references and references to this document, as a navigable tree.

Open Reference Tree

Reference this Doc

Plain text (ISO 690 compliant)

Preview:

IETF RFC 8094, DNS over Datagram Transport Layer Security (DTLS). Available at https://doi.org/10.17487/RFC8094

Snippet:

IETF RFC 8094, DNS over Datagram Transport Layer Security (DTLS). Available at https://doi.org/10.17487/RFC8094

HTML (ISO 690 compliant)

Preview:

IETF RFC 8094, DNS over Datagram Transport Layer Security (DTLS). Available at https://doi.org/10.17487/RFC8094

Snippet:

<span class="citation"><cite>IETF RFC 8094</cite>, DNS over Datagram Transport Layer Security (DTLS). Available at <a href="https://doi.org/10.17487/RFC8094" target="_blank" rel="noopener">https://doi.org/10.17487/RFC8094</a></span>

SMPTE's HTML Pub

Preview:

IETF RFC 8094, DNS over Datagram Transport Layer Security (DTLS)
doi: 10.17487/RFC8094
url: https://doi.org/10.17487/RFC8094

Snippet:

<li>
<cite id="bib-rfc8094">IETF RFC 8094</cite>, DNS over Datagram Transport Layer Security (DTLS)
<span class="doi">10.17487/RFC8094</span>
</li>

Referenced By

IETF RFC 8310 [Active*]
IETF RFC 8467 [Active*]
IETF RFC 8499 [Superseded*]
IETF RFC 8618 [Active*]
IETF RFC 8683 [Active*]
IETF RFC 8914 [Active*]
IETF RFC 8932 [Active*]
IETF RFC 9210 [Active*]
IETF RFC 9250 [Active*]
IETF RFC 9499 [Active*]
IETF RFC 9849 [Active*]