%% You should probably cite rfc9102 instead of this I-D. @techreport{dukhovni-tls-dnssec-chain-03, number = {draft-dukhovni-tls-dnssec-chain-03}, type = {Internet-Draft}, institution = {Internet Engineering Task Force}, publisher = {Internet Engineering Task Force}, note = {Work in Progress}, url = {https://datatracker.ietf.org/doc/draft-dukhovni-tls-dnssec-chain/03/}, author = {Viktor Dukhovni and Shumon Huque and Willem Toorop and Paul Wouters and Melinda Shore}, title = {{TLS DNSSEC Chain Extension}}, pagetotal = 35, year = 2021, month = apr, day = 15, abstract = {This document describes an experimental TLS extension for in-band transport of the complete set of DNSSEC validated records needed to perform DANE authentication of a TLS server without the need to perform separate out-of-band DNS lookups. When the requisite DNS records do not exist, the extension conveys a validated denial of existence proof. This experimental extension is developed outside the IETF and is published here to guide implementation of the extension and to ensure interoperability among implementations.}, }