9. 参考文献 (References)
9.1 规范性参考文献 (Normative References)
[BCP195] Sheffer, Y., Holz, R., and P. Saint-Andre, "Transport Layer Security (TLS) 和 Datagram Transport Layer Security (DTLS) 的安全使用建议", BCP 195, RFC 7525, May 2015, ````https://www.rfc-editor.org/info/bcp195\````.
[RFC1034] Mockapetris, P., "域名 - 概念和设施", STD 13, RFC 1034, DOI 10.17487/RFC1034, November 1987, ````http://www.rfc-editor.org/info/rfc1034\````.
[RFC1035] Mockapetris, P., "域名 - 实现和规范", STD 13, RFC 1035, DOI 10.17487/RFC1035, November 1987, ````http://www.rfc-editor.org/info/rfc1035\````.
[RFC2119] Bradner, S., "RFC 中用于表示需求级别的关键词", BCP 14, RFC 2119, DOI 10.17487/RFC2119, March 1997, ````http://www.rfc-editor.org/info/rfc2119\````.
[RFC4648] Josefsson, S., "Base16,Base32 和 Base64 数据编码", RFC 4648, DOI 10.17487/RFC4648, October 2006, ````http://www.rfc-editor.org/info/rfc4648\````.
[RFC5077] Salowey, J., Zhou, H., Eronen, P., and H. Tschofenig, "无服务器端状态的 Transport Layer Security (TLS) 会话恢复", RFC 5077, DOI 10.17487/RFC5077, January 2008, ````http://www.rfc-editor.org/info/rfc5077\````.
[RFC5246] Dierks, T. and E. Rescorla, "Transport Layer Security (TLS) 协议版本 1.2", RFC 5246, DOI 10.17487/RFC5246, August 2008, ````http://www.rfc-editor.org/info/rfc5246\````.
[RFC6234] Eastlake 3rd, D. and T. Hansen, "美国安全哈希算法 (SHA 以及基于 SHA 的 HMAC 和 HKDF)", RFC 6234, DOI 10.17487/RFC6234, May 2011, ````http://www.rfc-editor.org/info/rfc6234\````.
[RFC6335] Cotton, M., Eggert, L., Touch, J., Westerlund, M., and S. Cheshire, "Internet Assigned Numbers Authority (IANA) 管理服务名称和传输协议端口号注册表的程序", BCP 165, RFC 6335, DOI 10.17487/RFC6335, August 2011, ````http://www.rfc-editor.org/info/rfc6335\````.
[RFC7120] Cotton, M., "标准轨代码点的早期 IANA 分配", BCP 100, RFC 7120, DOI 10.17487/RFC7120, January 2014, ````http://www.rfc-editor.org/info/rfc7120\````.
[RFC7250] Wouters, P., Ed., Tschofenig, H., Ed., Gilmore, J., Weiler, S., and T. Kivinen, "在 Transport Layer Security (TLS) 和 Datagram Transport Layer Security (DTLS) 中使用原始公钥", RFC 7250, DOI 10.17487/RFC7250, June 2014, ````http://www.rfc-editor.org/info/rfc7250\````.
[RFC7469] Evans, C., Palmer, C., and R. Sleevi, "HTTP 公钥固定扩展", RFC 7469, DOI 10.17487/RFC7469, April 2015, ````http://www.rfc-editor.org/info/rfc7469\````.
[RFC7766] Dickinson, J., Dickinson, S., Bellis, R., Mankin, A., and D. Wessels, "基于 TCP 的 DNS 传输 - 实现要求", RFC 7766, DOI 10.17487/RFC7766, March 2016, ````http://www.rfc-editor.org/info/rfc7766\````.
9.2 资料性参考文献 (Informative References)
[CONFIDENTIAL-DNS] Wijngaards, W. and G. Wiley, "Confidential DNS", 进行中的工作, draft-wijngaards-dnsop-confidentialdns-03, March 2015.
[DNSCRYPT-WEBSITE] Denis, F., "DNSCrypt", December 2015, ````https://www.dnscrypt.org/\````.
[DNSCurve] Dempsky, M., "DNSCurve: 域名系统的链路级安全", 进行中的工作, draft-dempsky-dnscurve-01, February 2010.
[DNSoD] Reddy, T., Wing, D., and P. Patil, "DNS over DTLS (DNSoD)", 进行中的工作, draft-ietf-dprive-dnsodtls-06, April 2016.
[DNSSEC-TRIGGER] NLnet Labs, "Dnssec-Trigger", May 2014, ````https://www.nlnetlabs.nl/projects/dnssec-trigger/\````.
[IPSECA] Osterweil, E., Wiley, G., Okubo, T., Lavu, R., and A. Mohaisen, "结合 DANE 语义和 IPsec 的机会式加密: IPSECA", 进行中的工作, draft-osterweil-dane-ipsec-03, July 2015.
[RFC3234] Carpenter, B. and S. Brim, "中间盒: 分类和问题", RFC 3234, DOI 10.17487/RFC3234, February 2002, ````http://www.rfc-editor.org/info/rfc3234\````.
[RFC3646] Droms, R., Ed., "IPv6 动态主机配置协议 (DHCPv6) 的 DNS 配置选项", RFC 3646, DOI 10.17487/RFC3646, December 2003, ````http://www.rfc-editor.org/info/rfc3646\````.
[RFC4033] Arends, R., Austein, R., Larson, M., Massey, D., and S. Rose, "DNS 安全简介和要求", RFC 4033, DOI 10.17487/RFC4033, March 2005, ````http://www.rfc-editor.org/info/rfc4033\````.
[RFC7258] Farrell, S. and H. Tschofenig, "普遍监控是一种攻击", BCP 188, RFC 7258, DOI 10.17487/RFC7258, May 2014, ````http://www.rfc-editor.org/info/rfc7258\````.
[RFC7413] Cheng, Y., Chu, J., Radhakrishnan, S., and A. Jain, "TCP Fast Open", RFC 7413, DOI 10.17487/RFC7413, December 2014, ````http://www.rfc-editor.org/info/rfc7413\````.
[RFC7435] Dukhovni, V., "机会式安全: 大多数时间提供一定保护", RFC 7435, DOI 10.17487/RFC7435, December 2014, ````http://www.rfc-editor.org/info/rfc7435\````.
[RFC7626] Bortzmeyer, S., "DNS 隐私注意事项", RFC 7626, DOI 10.17487/RFC7626, August 2015, ````http://www.rfc-editor.org/info/rfc7626\````.
[RFC7828] Wouters, P., Abley, J., Dickinson, S., and R. Bellis, "The edns-tcp-keepalive EDNS0 Option", RFC 7828, DOI 10.17487/RFC7828, April 2016, ````http://www.rfc-editor.org/info/rfc7828\````.
[RFC7830] Mayrhofer, A., "EDNS(0) 填充选项", RFC 7830, DOI 10.17487/RFC7830, May 2016, ````http://www.rfc-editor.org/info/rfc7830\````.
[TDNS] Zhu, L., Hu, Z., Heidemann, J., Wessels, D., Mankin, A., and N. Somaiya, "用于改善隐私和安全的面向连接 DNS", 2015 IEEE Symposium on Security and Privacy (SP), DOI 10.1109/SP.2015.18, ````http://dx.doi.org/10.1109/SP.2015.18\````.
[TLS-DTLS-PROFILES] Dickinson, S., Gillmor, D., and T. Reddy, "DNS-over-TLS 和 DNS-over-DTLS 的认证及 (D)TLS 配置文件", 进行中的工作, draft-ietf-dprive-dtls-and-tls-profiles-01, March 2016.
[TLS-FALSESTART] Langley, A., Modadugu, N., and B. Moeller, "Transport Layer Security (TLS) False Start", 进行中的工作, draft-ietf-tls-falsestart-02, May 2016.