RFC 8310: Usage Profiles for DNS over TLS and DNS over DTLS

This document discusses usage profiles, based on one or more authentication mechanisms, which can be used for DNS over Transport Layer Security (TLS) or…

Read RFC 8310 on the RFC Editor

Outgoing relationships (20 related RFCs)

Updates — RFC 7858: Specification for DNS over Transport Layer Security (TLS)
Normative reference — RFC 2119: Key words for use in RFCs to Indicate Requirement Levels
Normative reference — RFC 5246: The Transport Layer Security (TLS) Protocol Version 1.2
Normative reference — RFC 5280: Internet X.509 Public Key Infrastructure Certificate and Certificate Revocation List (CRL) Profile
Normative reference — RFC 6347: Datagram Transport Layer Security Version 1.2
Normative reference — RFC 6125: Representation and Verification of Domain-Based Application Service Identity within Internet Public Key Infrastructure Using X.509 (PKIX) Certificates in the Context of Transport Layer Security (TLS)
Normative reference — RFC 7525: Recommendations for Secure Use of Transport Layer Security (TLS) and Datagram Transport Layer Security (DTLS)
Normative reference — RFC 6698: The DNS-Based Authentication of Named Entities (DANE) Transport Layer Security (TLS) Protocol: TLSA
Normative reference — RFC 5077: Transport Layer Security (TLS) Session Resumption without Server-Side State
Normative reference — RFC 8094: DNS over Datagram Transport Layer Security (DTLS)
Normative reference — RFC 7830: The EDNS(0) Padding Option
Informative reference — RFC 3315: Dynamic Host Configuration Protocol for IPv6 (DHCPv6)
Informative reference — RFC 2131: Dynamic Host Configuration Protocol
Informative reference — RFC 2132: DHCP Options and BOOTP Vendor Extensions
Informative reference — RFC 3646: DNS Configuration options for Dynamic Host Configuration Protocol for IPv6 (DHCPv6)
Informative reference — RFC 7435: Opportunistic Security: Some Protection Most of the Time
Informative reference — RFC 7227: Guidelines for Creating New DHCPv6 Options
Informative reference — RFC 7469: Public Key Pinning Extension for HTTP
Informative reference — RFC 7626: DNS Privacy Considerations
Informative reference — RFC 7871: Client Subnet in DNS Queries

Incoming relationships (8 related RFCs)

Normatively referenced by — RFC 9499: DNS Terminology
Normatively referenced by — RFC 8765: DNS Push Notifications
Normatively referenced by — RFC 9103: DNS Zone Transfer over TLS
Normatively referenced by — RFC 9464: Internet Key Exchange Protocol Version 2 (IKEv2) Configuration for Encrypted DNS
Normatively referenced by — RFC 8932: Recommendations for DNS Privacy Service Operators
Normatively referenced by — RFC 9102: TLS DNSSEC Chain Extension
Informatively referenced by — RFC 9463: DHCP and Router Advertisement Options for the Discovery of Network-designated Resolvers (DNR)
Informatively referenced by — RFC 9704: Establishing Local DNS Authority in Validated Split-Horizon Environments