Skip to content

Commit a3be211

Browse files
committed
Use RFC9230 for ODoH
1 parent 246d1e8 commit a3be211

1 file changed

Lines changed: 1 addition & 5 deletions

File tree

draft-denis-dns-stamps.md

Lines changed: 1 addition & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -34,10 +34,6 @@ informative:
3434
RFC5116:
3535
RFC8310:
3636
RFC9230:
37-
ODOH:
38-
title: "Oblivious DNS over HTTPS"
39-
target: "https://datatracker.ietf.org/doc/draft-pauly-dprive-oblivious-doh/"
40-
date: 2023
4137

4238
--- abstract
4339

@@ -47,7 +43,7 @@ This document specifies DNS Stamps, a compact format that encodes the informatio
4743

4844
# Introduction
4945

50-
The Domain Name System (DNS) has evolved significantly from its original design as specified in {{RFC1035}}. While traditional DNS operates over unencrypted UDP and TCP connections on port `53`, modern DNS deployments increasingly use encrypted transports to provide confidentiality and integrity. These secure protocols include DNSCrypt {{!I-D.denis-dprive-dnscrypt}}, DNS-over-TLS (DoT) {{RFC7858}}, DNS-over-HTTPS (DoH) {{RFC8484}}, DNS-over-QUIC (DoQ) {{RFC9250}}, and Oblivious DNS-over-HTTPS {{ODOH}}.
46+
The Domain Name System (DNS) has evolved significantly from its original design as specified in {{RFC1035}}. While traditional DNS operates over unencrypted UDP and TCP connections on port `53`, modern DNS deployments increasingly use encrypted transports to provide confidentiality and integrity. These secure protocols include DNSCrypt {{!I-D.denis-dprive-dnscrypt}}, DNS-over-TLS (DoT) {{RFC7858}}, DNS-over-HTTPS (DoH) {{RFC8484}}, DNS-over-QUIC (DoQ) {{RFC9250}}, and Oblivious DNS-over-HTTPS {{RFC9230}}.
5147

5248
Each secure DNS protocol requires different configuration parameters. DNSCrypt needs a provider public key and provider name in addition to server addresses. DoH requires HTTPS endpoints and paths. DoT and DoQ need TLS configuration including certificate validation parameters. This diversity in configuration requirements creates significant challenges for both users and applications attempting to configure secure DNS resolvers.
5349

0 commit comments

Comments
 (0)