@techreport{hzhwm-start-tls-for-dns-01, number = {draft-hzhwm-start-tls-for-dns-01}, type = {Internet-Draft}, institution = {Internet Engineering Task Force}, publisher = {Internet Engineering Task Force}, note = {Work in Progress}, url = {https://datatracker.ietf.org/doc/draft-hzhwm-start-tls-for-dns/01/}, author = {Zi Hu and Liang Zhu and John Heidemann and Allison Mankin and Duane Wessels}, title = {{Starting TLS over DNS}}, pagetotal = 12, year = 2014, month = jul, day = 4, abstract = {This document describes a technique for upgrading a DNS TCP connection to use Transport Layer Security (TLS) over standard ports. Encryption provided by DNS-over-TLS eliminates opportunities for eavesdropping of DNS queries in the network. The proposed mechanism is backwards compatible with clients and servers that are not aware of DNS-over-TLS.}, }