Documents by V. Dukhovni
2014, RFC7435: Opportunistic Security: Some Protection Most of the Time
2015, RFC7671: The DNS-Based Authentication of Named Entities (DANE) Protocol: Updates and Operational Guidance
2015, RFC7672: SMTP Security via Opportunistic DNS-Based Authentication of Named Entities (DANE) Transport Layer Security (TLS)
2021, RFC9102: TLS DNSSEC Chain Extension
2022, RFC9276: Guidance for NSEC3 Parameter Settings