Salesforce OpenSSL Corporation The DNS-Based Authentication of Named Entities (DANE) protocol describes how to publish Transport Layer Security (TLS) server certificates or public keys in the DNS, using the TLSA resource record. This document describes how to use the TLSA record to publish client certificates or public keys, and also the rules and considerations for using them with TLS. In addition, it defines a new TLS extension, DANE Client Identity, to convey the client's domain name identity to the server.