A New Internet-Draft is available from the on-line Internet-Drafts directories.
Title : DNS over DTLS (DNSoD)
Authors : Tirumaleswar Reddy
Dan Wing
Prashanth Patil
Filename : draft-wing-dnsop-dnsodtls-01.txt
Pages : 11
Date : 2014-07-04
Abstract:
DNS queries and responses are visible to network elements on the path
between the DNS client and its server. These queries and responses
can contain privacy-sensitive information which is valuable to
protect. An active attacker can send bogus responses causing
misdirection of the subsequent connection.
To counter passive listening and active attacks, this document
proposes the use of Datagram Transport Layer Security (DTLS) for DNS,
to protect against passive listeners and certain active attacks. As
DNS needs to remain fast, this proposal also discusses mechanisms to
reduce DTLS round trips and reduce DTLS handshake size. The proposed
mechanism runs over the default DNS port and can also run over an
alternate port.
The IETF datatracker status page for this draft is:
https://datatracker.ietf.org/doc/draft-wing-dnsop-dnsodtls/
There's also a htmlized version available at:
http://tools.ietf.org/html/draft-wing-dnsop-dnsodtls-01
A diff from the previous version is available at:
http://www.ietf.org/rfcdiff?url2=draft-wing-dnsop-dnsodtls-01
Please note that it may take a couple of minutes from the time of submission
until the htmlized version and diff are available at tools.ietf.org.
Internet-Drafts are also available by anonymous FTP at:
ftp://ftp.ietf.org/internet-drafts/
_______________________________________________
I-D-Announce mailing list
I-D-Announce@ietf.org
https://www.ietf.org/mailman/listinfo/i-d-announce
Internet-Draft directories: http://www.ietf.org/shadow.html
or ftp://ftp.ietf.org/ietf/1shadow-sites.txt
