%% You should probably cite draft-ietf-tls-encrypt-then-mac instead of this I-D. @techreport{gutmann-tls-encrypt-then-mac-03, number = {draft-gutmann-tls-encrypt-then-mac-03}, type = {Internet-Draft}, institution = {Internet Engineering Task Force}, publisher = {Internet Engineering Task Force}, note = {Work in Progress}, url = {https://datatracker.ietf.org/doc/draft-gutmann-tls-encrypt-then-mac/03/}, author = {Peter Gutmann}, title = {{Encrypt-then-MAC for TLS and DTLS}}, pagetotal = 6, year = 2013, month = jun, day = 29, abstract = {This document describes a means of negotiating the use of the encrypt-then-MAC security mechanism in place of TLS'/DTLS' existing MAC-then-encrypt one, which has been the subject of a number of security vulnerabilities over a period of many years.}, }