Usage Profiles for DNS over TLS and DNS over DTLS

Metadata

Publisher: IETF
Doc Type: Standard
Pages: 27
Abstract: This document discusses usage profiles, based on one or more authentication mechanisms, which can be used for DNS over Transport Layer Security (TLS) or Datagram TLS (DTLS). These profiles can increase the privacy of DNS transactions compared to using only cleartext DNS. This document also specifies new authentication mechanisms -- it describes several ways that a DNS client can use an authentication domain name to authenticate a (D)TLS connection to a DNS server. Additionally, it defines (D)TLS protocol profiles for DNS clients and servers implementing DNS over (D)TLS. This document updates RFC 7858.
Publication Date: 2018-03-01
Status Note: Proposed Standard
DOI: 10.17487/RFC8310
Link: https://doi.org/10.17487/RFC8310
Author(s): Sara Dickinson
Daniel Kahn Gillmor
Tirumaleswar Reddy.K
Keyword(s): DNS, Transport

Latest version of IETF RFC 8310

Document Versions — IETF RFC 8310

▶ IETF RFC 8310 (2018-03-01)

THIS DOC [ACTIVE] [LATEST VERSION]

Normative Reference(s)

IETF RFC 2119 [Active*]
IETF RFC 5077 [Superseded*]
IETF RFC 5246 [Superseded*]
IETF RFC 5280 [Active, Amended*]
IETF RFC 6125 [Superseded*]
IETF RFC 6347 [Superseded*]
IETF RFC 6698 [Active*]
IETF RFC 7250 [Active*]
IETF RFC 7525 [Superseded*]
IETF RFC 7671 [Active*]
IETF RFC 7830 [Active*]
IETF RFC 7858 [Active*]
IETF RFC 7918 [Active*]
IETF RFC 7924 [Active*]
IETF RFC 8094 [Active*]
IETF RFC 8174 [Active*]

Bibliographic Reference(s)

IETF.draft-ietf-dprive-padding-policy-04 — EDNS0-Pad-Policies EXTERNAL
IETF.draft-ietf-tls-dnssec-chain-extension-06 — TLS-DNSSEC-Chain-Ext EXTERNAL
IETF.draft-ietf-tls-dtls13-26 — DTLS-1.3 EXTERNAL
IETF.draft-ietf-tls-tls13-27 — TLS-1.3 EXTERNAL
NLnetLabs, "Dnssec-Trigger", December 2017, < https://www.nlnetlabs.nl/projects/dnssec-trigger/ >. EXTERNAL
Rizzo, J. and T. Duong, "The CRIME Attack", Ekoparty Security Conference, 2012, < https://www.ekoparty.org/archivo/2012/eko8-CRIME.pdf >. EXTERNAL
IETF RFC 2131 [Active*]
IETF RFC 2132 [Active*]
IETF RFC 3315 [Superseded*]
IETF RFC 3646 [Active*]
IETF RFC 7227 [Active*]
IETF RFC 7435 [Active*]
IETF RFC 7469 [Active*]
IETF RFC 7626 [Superseded*]
IETF RFC 7871 [Active*]

Source Data (JSON)

Full registry record with provenance metadata. Open directly: /api/doc/RFC8310.json

Amends:

IETF RFC 7858 [Active*]

Reference Tree

Explore all references and references to this document, as a navigable tree.

Open Reference Tree

Reference this Doc

Plain text (ISO 690 compliant)

Preview:

IETF RFC 8310, Usage Profiles for DNS over TLS and DNS over DTLS. Available at https://doi.org/10.17487/RFC8310

Snippet:

IETF RFC 8310, Usage Profiles for DNS over TLS and DNS over DTLS. Available at https://doi.org/10.17487/RFC8310

HTML (ISO 690 compliant)

Preview:

IETF RFC 8310, Usage Profiles for DNS over TLS and DNS over DTLS. Available at https://doi.org/10.17487/RFC8310

Snippet:

<span class="citation"><cite>IETF RFC 8310</cite>, Usage Profiles for DNS over TLS and DNS over DTLS. Available at <a href="https://doi.org/10.17487/RFC8310" target="_blank" rel="noopener">https://doi.org/10.17487/RFC8310</a></span>

SMPTE's HTML Pub

Preview:

IETF RFC 8310, Usage Profiles for DNS over TLS and DNS over DTLS
doi: 10.17487/RFC8310
url: https://doi.org/10.17487/RFC8310

Snippet:

<li>
<cite id="bib-rfc8310">IETF RFC 8310</cite>, Usage Profiles for DNS over TLS and DNS over DTLS
<span class="doi">10.17487/RFC8310</span>
</li>

Referenced By

IETF RFC 8499 [Superseded*]
IETF RFC 8932 [Active*]
IETF RFC 9103 [Active*]
IETF RFC 9250 [Active*]
IETF RFC 9499 [Active*]
IETF RFC 9852 [Active*]