@techreport{ietf-iotops-iot-dns-guidelines-04, number = {draft-ietf-iotops-iot-dns-guidelines-04}, type = {Internet-Draft}, institution = {Internet Engineering Task Force}, publisher = {Internet Engineering Task Force}, note = {Work in Progress}, url = {https://datatracker.ietf.org/doc/draft-ietf-iotops-iot-dns-guidelines/04/}, author = {Abhishek Kumar Mishra and Andrew Losty and Anna Maria Mandalari and Jim Mozley and Mathieu Cunche}, title = {{IoT DNS Security and Privacy Guidelines}}, pagetotal = 17, year = 2026, month = jul, day = 6, abstract = {This document outlines guidance for Internet of Things (IoT) manufacturers regarding the implementation of DNS stub resolver software on devices, and for the management zones used for purposes such as device configuration and software upgrades. It aims to mitigate security threats, enhance privacy, and to address operational security challenges. DNS resolution between devices and management zone servers depends upon DNS services within operator networks, and these services and operator networks can be impacted by device behavior. Hence this document also provides guidance to network operators that deploy IoT devices to mitigate the specific risks identified in this document and take advantage of improved DNS security mechanisms provided by manufacturers.}, }