Specification of DNS over Dedicated QUIC Connections

Document Type Replaced Internet-Draft (dprive WG)
Authors Christian Huitema  , Allison Mankin  , Sara Dickinson 
Last updated 2020-04-22 (latest revision 2020-03-05)
Replaces draft-huitema-quic-dnsoquic
Replaced by draft-ietf-dprive-dnsoquic
Stream IETF
Intended RFC status Proposed Standard
Expired & archived
pdf htmlized (tools) htmlized bibtex
Stream WG state Adopted by a WG
Document shepherd No shepherd assigned
IESG IESG state Replaced by draft-ietf-dprive-dnsoquic
Consensus Boilerplate Yes
Telechat date
Responsible AD (None)
Send notices to (None)

This Internet-Draft is no longer active. A copy of the expired Internet-Draft can be found at


This document describes the use of QUIC to provide transport privacy for DNS. The encryption provided by QUIC has similar properties to that provided by TLS, while QUIC transport eliminates the head-of- line blocking issues inherent with TCP and provides more efficient error corrections than UDP. DNS over QUIC (DoQ) has privacy properties similar to DNS over TLS (DoT) specified in RFC7858, and performance characteristics similar to classic DNS over UDP.


Christian Huitema (huitema@huitema.net)
Allison Mankin (amankin@salesforce.com)
Sara Dickinson (sara@sinodun.com)

(Note: The e-mail addresses provided for the authors of this Internet-Draft may no longer be valid.)