{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,3,31]],"date-time":"2026-03-31T08:43:02Z","timestamp":1774946582357,"version":"3.50.1"},"publisher-location":"New York, NY, USA","reference-count":64,"publisher":"ACM","license":[{"start":{"date-parts":[[2022,12,5]],"date-time":"2022-12-05T00:00:00Z","timestamp":1670198400000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.acm.org\/publications\/policies\/copyright_policy#Background"}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2022,12,5]]},"DOI":"10.1145\/3564625.3567968","type":"proceedings-article","created":{"date-parts":[[2022,12,3]],"date-time":"2022-12-03T01:01:29Z","timestamp":1670029289000},"page":"699-713","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":6,"title":["ZeroDNS: Towards Better Zero Trust Security using DNS"],"prefix":"10.1145","author":[{"ORCID":"https:\/\/orcid.org\/0000-0002-1837-2158","authenticated-orcid":false,"given":"Levente","family":"Csikor","sequence":"first","affiliation":[{"name":"Institute for Infocomm Research, A*STAR, Singapore"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-2344-765X","authenticated-orcid":false,"given":"Sriram","family":"Ramachandran","sequence":"additional","affiliation":[{"name":"Institute for Infocomm Research, A*STAR, Singapore"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-0429-8062","authenticated-orcid":false,"given":"Anantharaman","family":"Lakshminarayanan","sequence":"additional","affiliation":[{"name":"Institute for Infocomm Research, A*STAR, Singapore"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"320","published-online":{"date-parts":[[2022,12,5]]},"reference":[{"key":"e_1_3_2_1_1_1","unstructured":"A10 Networks. [Accessed: Sep 2022]. What is IPv4 Exhaustion?Online Glossary of Terms https:\/\/www.a10networks.com\/glossary\/what-is-ipv4-exhaustion\/.  A10 Networks. [Accessed: Sep 2022]. What is IPv4 Exhaustion?Online Glossary of Terms https:\/\/www.a10networks.com\/glossary\/what-is-ipv4-exhaustion\/."},{"key":"e_1_3_2_1_2_1","unstructured":"A10 Networks. Jun 2022 [Accessed: Sep 2022]. Enterprise Perspectives 2022: Zero Trust Cloud and Remote Work Drive Digital Resiliency. Enterprise report https:\/\/links.a10networks.com\/NDE3LUdVQi05OTUAAAGE_zvj7YLRpVIB8AdLlqEceIT3UZEVlXclrkm6DG8ii00cR609-QZ5G5TQRu29igpHR0x8lwM=.  A10 Networks. Jun 2022 [Accessed: Sep 2022]. Enterprise Perspectives 2022: Zero Trust Cloud and Remote Work Drive Digital Resiliency. Enterprise report https:\/\/links.a10networks.com\/NDE3LUdVQi05OTUAAAGE_zvj7YLRpVIB8AdLlqEceIT3UZEVlXclrkm6DG8ii00cR609-QZ5G5TQRu29igpHR0x8lwM=."},{"key":"e_1_3_2_1_3_1","unstructured":"Daniel Aleksandersen. Jun 2018 [Accessed: Sep 2022]. Actually secure DNS over TLS in Unbound. Ctrl.blog https:\/\/www.ctrl.blog\/entry\/unbound-tls-forwarding.html.  Daniel Aleksandersen. Jun 2018 [Accessed: Sep 2022]. Actually secure DNS over TLS in Unbound. Ctrl.blog https:\/\/www.ctrl.blog\/entry\/unbound-tls-forwarding.html."},{"key":"e_1_3_2_1_4_1","unstructured":"Mitchell Anicas. May 2014 [Acceessed: May 2022]. An Introduction to HAProxy and Load Balancing Concepts. Digital Ocean Tutorial https:\/\/www.digitalocean.com\/community\/tutorials\/an-introduction-to-haproxy-and-load-balancing-concepts.  Mitchell Anicas. May 2014 [Acceessed: May 2022]. An Introduction to HAProxy and Load Balancing Concepts. Digital Ocean Tutorial https:\/\/www.digitalocean.com\/community\/tutorials\/an-introduction-to-haproxy-and-load-balancing-concepts."},{"key":"e_1_3_2_1_5_1","unstructured":"Jim Black. Jan 2022 [Accessed: Sep 2022]. We Need to Encrypt DNS: Here\u2019s Another Compelling Reason Why. Akamai Blogpost https:\/\/www.akamai.com\/blog\/security\/we-need-to-encrypt-dns-heres-another-compelling-reason-why.  Jim Black. Jan 2022 [Accessed: Sep 2022]. We Need to Encrypt DNS: Here\u2019s Another Compelling Reason Why. Akamai Blogpost https:\/\/www.akamai.com\/blog\/security\/we-need-to-encrypt-dns-heres-another-compelling-reason-why."},{"key":"e_1_3_2_1_6_1","unstructured":"Mark Boddington. Feb 2022 [Accessed: Sep 2022]. Using NGINX as a DoT or DoH Gateway. NGINX blog post https:\/\/www.nginx.com\/blog\/using-nginx-as-dot-doh-gateway\/.  Mark Boddington. Feb 2022 [Accessed: Sep 2022]. Using NGINX as a DoT or DoH Gateway. NGINX blog post https:\/\/www.nginx.com\/blog\/using-nginx-as-dot-doh-gateway\/."},{"key":"e_1_3_2_1_7_1","volume-title":"Oct 2020]. The Role of Social Media in the Arab Uprisings","author":"Brown Heather","year":"2012","unstructured":"Heather Brown , Emily Guskin , and Amy Mitchell . Nov 2012 [ Accessed : Oct 2020]. The Role of Social Media in the Arab Uprisings . Pew Research Center Journalism & Media , https:\/\/www.journalism.org\/ 2012 \/11\/28\/role-social-media-arab-uprisings\/. Heather Brown, Emily Guskin, and Amy Mitchell. Nov 2012 [Accessed: Oct 2020]. The Role of Social Media in the Arab Uprisings. Pew Research Center Journalism & Media, https:\/\/www.journalism.org\/2012\/11\/28\/role-social-media-arab-uprisings\/."},{"key":"e_1_3_2_1_8_1","unstructured":"Cloudflare. [Accessed: Jun 2022]. What is mutual TLS (mTLS)?Online https:\/\/www.cloudflare.com\/en-gb\/learning\/access-management\/what-is-mutual-tls\/.  Cloudflare. [Accessed: Jun 2022]. What is mutual TLS (mTLS)?Online https:\/\/www.cloudflare.com\/en-gb\/learning\/access-management\/what-is-mutual-tls\/."},{"key":"e_1_3_2_1_9_1","unstructured":"Cloudflare. [Accessed: Oct 2020]. What is DNS cache poisoning? | DNS spoofing. [Online] https:\/\/www.cloudflare.com\/learning\/dns\/dns-cache-poisoning\/.  Cloudflare. [Accessed: Oct 2020]. What is DNS cache poisoning? | DNS spoofing. [Online] https:\/\/www.cloudflare.com\/learning\/dns\/dns-cache-poisoning\/."},{"key":"e_1_3_2_1_10_1","unstructured":"Cloudflare. Dec 2021 [Accessed: Sep 2022]. Cloudflare One. At a glance brochure https:\/\/www.cloudflare.com\/static\/e9ea5dfaa69c554cc1cbaa7f3e441acf\/Cloudflare_One_at_a_glance.pdf.  Cloudflare. Dec 2021 [Accessed: Sep 2022]. Cloudflare One. At a glance brochure https:\/\/www.cloudflare.com\/static\/e9ea5dfaa69c554cc1cbaa7f3e441acf\/Cloudflare_One_at_a_glance.pdf."},{"key":"e_1_3_2_1_11_1","volume-title":"Committing to Customer Privacy Protection","author":"Jun","unstructured":"Comcast. Jun 2020. Xfinity Internet Joins Firefox\u2019s Recursive Resolver Program , Committing to Customer Privacy Protection . Press release, https:\/\/corporate.comcast.com\/press\/releases\/comcast-xfinity-internet-firefox-trusted-recursive-resolver-program-customer-privacy. Comcast. Jun 2020. Xfinity Internet Joins Firefox\u2019s Recursive Resolver Program, Committing to Customer Privacy Protection. Press release, https:\/\/corporate.comcast.com\/press\/releases\/comcast-xfinity-internet-firefox-trusted-recursive-resolver-program-customer-privacy."},{"key":"e_1_3_2_1_12_1","volume-title":"van\u00a0der Gaast","author":"Contavalli C.","year":"2016","unstructured":"C. Contavalli , W. van\u00a0der Gaast , D. Lawrence , and W. Kumari. 2016 . Client Subnet in DNS Queries. RFC 7871. RFC Editor . C. Contavalli, W. van\u00a0der Gaast, D. Lawrence, and W. Kumari. 2016. Client Subnet in DNS Queries. RFC 7871. RFC Editor."},{"key":"e_1_3_2_1_13_1","doi-asserted-by":"publisher","DOI":"10.1109\/EuroSP51992.2021.00026"},{"key":"e_1_3_2_1_14_1","doi-asserted-by":"crossref","unstructured":"S. Dickinson B. Overeinder R. van Rijswijk-Deij and A. Mankin. 2020. Recommendations for DNS Privacy Service Operators. BCP 232. RFC Editor.  S. Dickinson B. Overeinder R. van Rijswijk-Deij and A. Mankin. 2020. Recommendations for DNS Privacy Service Operators. BCP 232. RFC Editor.","DOI":"10.17487\/RFC8932"},{"key":"e_1_3_2_1_15_1","unstructured":"DNSCrypt project. [Accessed: Sep 2022]. DNSCrypt version 2 protocol specification. [Online] https:\/\/dnscrypt.info\/protocol\/.  DNSCrypt project. [Accessed: Sep 2022]. DNSCrypt version 2 protocol specification. [Online] https:\/\/dnscrypt.info\/protocol\/."},{"key":"e_1_3_2_1_16_1","unstructured":"efficient iP. Mar 2019 [Accessed: Sep 2022]. Zero Trust: Verifying beyond perimeters DNS security is key. Blogpost https:\/\/www.efficientip.com\/zero-trust-dns-security\/.  efficient iP. Mar 2019 [Accessed: Sep 2022]. Zero Trust: Verifying beyond perimeters DNS security is key. Blogpost https:\/\/www.efficientip.com\/zero-trust-dns-security\/."},{"key":"e_1_3_2_1_17_1","unstructured":"Justin Ellingwood. Nov 2014 [Accessed: Sep 2022]. Understanding Nginx HTTP Proxying Load Balancing Buffering and Caching. DigitalOcean blogpost https:\/\/www.digitalocean.com\/community\/tutorials\/understanding-nginx-http-proxying-load-balancing-buffering-and-caching.  Justin Ellingwood. Nov 2014 [Accessed: Sep 2022]. Understanding Nginx HTTP Proxying Load Balancing Buffering and Caching. DigitalOcean blogpost https:\/\/www.digitalocean.com\/community\/tutorials\/understanding-nginx-http-proxying-load-balancing-buffering-and-caching."},{"key":"e_1_3_2_1_18_1","volume-title":"Network Functions Virtualization (NFV)","author":"ETSI GS NFV","unstructured":"ETSI GS NFV 002. Oct 2013. Network Functions Virtualization (NFV) ; Architectural Framework v1.1.1. http:\/\/www.etsi.org\/deliver\/etsi_gs\/NFV\/001_099\/002\/01.01.01_60\/gs_NFV002v010101p.pdf. ETSI GS NFV 002. Oct 2013. Network Functions Virtualization (NFV); Architectural Framework v1.1.1. http:\/\/www.etsi.org\/deliver\/etsi_gs\/NFV\/001_099\/002\/01.01.01_60\/gs_NFV002v010101p.pdf."},{"key":"e_1_3_2_1_19_1","unstructured":"Paul Fisher. Mar 2022 [Accessed: Sep 2022]. Kong Gateway 2.8: Increase Security and Simplify API Management. Product Releases https:\/\/konghq.com\/blog\/kong-gateway-2-8.  Paul Fisher. Mar 2022 [Accessed: Sep 2022]. Kong Gateway 2.8: Increase Security and Simplify API Management. Product Releases https:\/\/konghq.com\/blog\/kong-gateway-2-8."},{"key":"e_1_3_2_1_20_1","unstructured":"Sean Gallagher. Apr 2018 [Accessed: Sep 2022]. How to keep your ISP\u2019s nose out of your browser history with encrypted DNS. arsTechnica Blogpost https:\/\/arstechnica.com\/information-technology\/2018\/04\/how-to-keep-your-isps-nose-out-of-your-browser-history-with-encrypted-dns\/.  Sean Gallagher. Apr 2018 [Accessed: Sep 2022]. How to keep your ISP\u2019s nose out of your browser history with encrypted DNS. arsTechnica Blogpost https:\/\/arstechnica.com\/information-technology\/2018\/04\/how-to-keep-your-isps-nose-out-of-your-browser-history-with-encrypted-dns\/."},{"key":"e_1_3_2_1_21_1","unstructured":"Robert Gibb. Jun 2016 [Accessed: Sep 2022]. What is Time to First Byte?Stackpath Blogpost https:\/\/blog.stackpath.com\/time-to-first-byte\/.  Robert Gibb. Jun 2016 [Accessed: Sep 2022]. What is Time to First Byte?Stackpath Blogpost https:\/\/blog.stackpath.com\/time-to-first-byte\/."},{"key":"e_1_3_2_1_22_1","volume-title":"Zero Trust Networks","author":"Gilman Evan","unstructured":"Evan Gilman and Doug Barth . 2017. Zero Trust Networks . O\u2019Reilly Media Inc , 1005 Gravenstein Highway North, Sebastopol, CA 95472. Evan Gilman and Doug Barth. 2017. Zero Trust Networks. O\u2019Reilly Media Inc, 1005 Gravenstein Highway North, Sebastopol, CA 95472."},{"key":"e_1_3_2_1_23_1","unstructured":"Google. [Accessed: Sep 2022]. What is Apigee?Google Cloud Docs https:\/\/cloud.google.com\/apigee\/docs\/api-platform\/get-started\/what-apigee.  Google. [Accessed: Sep 2022]. What is Apigee?Google Cloud Docs https:\/\/cloud.google.com\/apigee\/docs\/api-platform\/get-started\/what-apigee."},{"key":"e_1_3_2_1_24_1","unstructured":"Mike Hadlow. May 2013 [Accessed: Sep 2022]. The Benefits of a Reverse Proxy. DevOps Zone - Interview https:\/\/dzone.com\/articles\/benefits-reverse-proxy.  Mike Hadlow. May 2013 [Accessed: Sep 2022]. The Benefits of a Reverse Proxy. DevOps Zone - Interview https:\/\/dzone.com\/articles\/benefits-reverse-proxy."},{"key":"e_1_3_2_1_25_1","unstructured":"Mike Hathaway. Feb 2020 [Accessed: Sep 2022]. What is OCSP and how does it work?ascertia Blogpost https:\/\/blog.ascertia.com\/what-is-ocsp-and-how-does-it-work.  Mike Hathaway. Feb 2020 [Accessed: Sep 2022]. What is OCSP and how does it work?ascertia Blogpost https:\/\/blog.ascertia.com\/what-is-ocsp-and-how-does-it-work."},{"key":"e_1_3_2_1_26_1","doi-asserted-by":"crossref","unstructured":"P. Hoffman and P. McManus. 2018. DNS Queries over HTTPS (DoH). RFC 8484. Internet Engineering Task Force.  P. Hoffman and P. McManus. 2018. DNS Queries over HTTPS (DoH). RFC 8484. Internet Engineering Task Force.","DOI":"10.17487\/RFC8484"},{"key":"e_1_3_2_1_27_1","doi-asserted-by":"crossref","unstructured":"Z. Hu L. Zhu J. Heidemann A. Mankin D. Wessels and P. Hoffman. 2016. Specification for DNS over Transport Layer Security (TLS). RFC 7858. Internet Engineering Task Force. 1\u201319 pages. http:\/\/www.rfc-editor.org\/rfc\/rfc7858.txt  Z. Hu L. Zhu J. Heidemann A. Mankin D. Wessels and P. Hoffman. 2016. Specification for DNS over Transport Layer Security (TLS). RFC 7858. Internet Engineering Task Force. 1\u201319 pages. http:\/\/www.rfc-editor.org\/rfc\/rfc7858.txt","DOI":"10.17487\/RFC7858"},{"key":"e_1_3_2_1_28_1","unstructured":"IANA. Feb 2020 [Accessed: Sep 2022]. Technical requirements for authoritative name servers. Online: https:\/\/www.iana.org\/help\/nameserver-requirements.  IANA. Feb 2020 [Accessed: Sep 2022]. Technical requirements for authoritative name servers. Online: https:\/\/www.iana.org\/help\/nameserver-requirements."},{"key":"e_1_3_2_1_29_1","unstructured":"Infoblox. May 2020 [Accessed: Sep 2022]. DNS Security is Critical to Zero Trust Network Architecture. Blogpost https:\/\/blogs.infoblox.com\/security\/dns-security-is-critical-to-zero-trust-network-architecture\/.  Infoblox. May 2020 [Accessed: Sep 2022]. DNS Security is Critical to Zero Trust Network Architecture. Blogpost https:\/\/blogs.infoblox.com\/security\/dns-security-is-critical-to-zero-trust-network-architecture\/."},{"key":"e_1_3_2_1_30_1","unstructured":"IONOS. May 2022 [Accessed: Sep 2022]. DNS TTL best practices: Understanding and configuring DNS TTL. Configuration guide https:\/\/www.ionos.com\/digitalguide\/server\/configuration\/understanding-and-configuring-dns-ttl\/.  IONOS. May 2022 [Accessed: Sep 2022]. DNS TTL best practices: Understanding and configuring DNS TTL. Configuration guide https:\/\/www.ionos.com\/digitalguide\/server\/configuration\/understanding-and-configuring-dns-ttl\/."},{"key":"e_1_3_2_1_31_1","unstructured":"ISC. [Accessed: Sep 2022]. Bind9. Online https:\/\/www.isc.org\/bind\/.  ISC. [Accessed: Sep 2022]. Bind9. Online https:\/\/www.isc.org\/bind\/."},{"key":"e_1_3_2_1_32_1","volume-title":"Sep 2022]. Bind9.17.7 - Release notes. Online","author":"Accessed ISC.","unstructured":"ISC. [ Accessed : Sep 2022]. Bind9.17.7 - Release notes. Online , http:\/\/ftp.iij.ad.jp\/pub\/network\/isc\/bind9\/9.17.7\/doc\/arm\/html\/notes.html#notes-for-bind-9-17-7. ISC. [Accessed: Sep 2022]. Bind9.17.7 - Release notes. Online, http:\/\/ftp.iij.ad.jp\/pub\/network\/isc\/bind9\/9.17.7\/doc\/arm\/html\/notes.html#notes-for-bind-9-17-7."},{"key":"e_1_3_2_1_33_1","unstructured":"ISPreview. Sep 2019. Firefox Says \u2013 NO DNS Over HTTPS (DoH) by Default for UK. Blog post https:\/\/www.ispreview.co.uk\/index.php\/2019\/09\/firefox-says-no-dns-over-https-doh-by-default-for-uk.html.  ISPreview. Sep 2019. Firefox Says \u2013 NO DNS Over HTTPS (DoH) by Default for UK. Blog post https:\/\/www.ispreview.co.uk\/index.php\/2019\/09\/firefox-says-no-dns-over-https-doh-by-default-for-uk.html."},{"key":"e_1_3_2_1_34_1","unstructured":"JH Software. 2021 [Accessed: Sep 2022]. New in Simple DNS Plus. Online https:\/\/simpledns.plus\/kb\/194\/new-in-simple-dns-plus-v9-0.  JH Software. 2021 [Accessed: Sep 2022]. New in Simple DNS Plus. Online https:\/\/simpledns.plus\/kb\/194\/new-in-simple-dns-plus-v9-0."},{"key":"e_1_3_2_1_35_1","doi-asserted-by":"publisher","DOI":"10.17487\/RFC7519"},{"key":"e_1_3_2_1_36_1","unstructured":"Dan Kegel. 2014 [Accessed: Sep 2022]. The C10K problem. Online http:\/\/www.kegel.com\/c10k.html.  Dan Kegel. 2014 [Accessed: Sep 2022]. The C10K problem. Online http:\/\/www.kegel.com\/c10k.html."},{"key":"e_1_3_2_1_37_1","volume-title":"Security and Privacy in Communication Networks","author":"Kim Dae\u00a0Wook","unstructured":"Dae\u00a0Wook Kim and Junjie Zhang . 2015. You Are How You Query: Deriving Behavioral Fingerprints from DNS Traffic . In Security and Privacy in Communication Networks , Bhavani Thuraisingham, XiaoFeng Wang, and Vinod Yegneswaran (Eds.). Springer International Publishing , Cham , 348\u2013366. Dae\u00a0Wook Kim and Junjie Zhang. 2015. You Are How You Query: Deriving Behavioral Fingerprints from DNS Traffic. In Security and Privacy in Communication Networks, Bhavani Thuraisingham, XiaoFeng Wang, and Vinod Yegneswaran (Eds.). Springer International Publishing, Cham, 348\u2013366."},{"key":"e_1_3_2_1_38_1","unstructured":"Kinsta. Jan 2022 [Accessed: Sep 2022]. What Is Nginx? A Basic Look at What It Is and How It Works. Glossary https:\/\/kinsta.com\/knowledgebase\/what-is-nginx\/.  Kinsta. Jan 2022 [Accessed: Sep 2022]. What Is Nginx? A Basic Look at What It Is and How It Works. Glossary https:\/\/kinsta.com\/knowledgebase\/what-is-nginx\/."},{"key":"e_1_3_2_1_39_1","unstructured":"KNOT DNS. [Accessed: Sep 2022]. kdig \u2013 Advanced DNS lookup utility. Online https:\/\/www.knot-dns.cz\/docs\/2.6\/html\/man_kdig.html.  KNOT DNS. [Accessed: Sep 2022]. kdig \u2013 Advanced DNS lookup utility. Online https:\/\/www.knot-dns.cz\/docs\/2.6\/html\/man_kdig.html."},{"key":"e_1_3_2_1_40_1","doi-asserted-by":"publisher","DOI":"10.1109\/JPROC.2014.2371999"},{"key":"e_1_3_2_1_41_1","unstructured":"Chenta Lee. Dec 2021 [Accessed: Sep 2022]. Zero Trust and DNS Security: Better Together. SecurityIntelligence Blogpost https:\/\/securityintelligence.com\/posts\/zero-trust-dns-security\/.  Chenta Lee. Dec 2021 [Accessed: Sep 2022]. Zero Trust and DNS Security: Better Together. SecurityIntelligence Blogpost https:\/\/securityintelligence.com\/posts\/zero-trust-dns-security\/."},{"key":"e_1_3_2_1_42_1","unstructured":"Zi Lin. Feb 2015 [Accessed: Sep 2022]. TLS Session Resumption: Full-speed and Secure. Cloudflare Blog post https:\/\/blog.cloudflare.com\/tls-session-resumption-full-speed-and-secure\/.  Zi Lin. Feb 2015 [Accessed: Sep 2022]. TLS Session Resumption: Full-speed and Secure. Cloudflare Blog post https:\/\/blog.cloudflare.com\/tls-session-resumption-full-speed-and-secure\/."},{"key":"e_1_3_2_1_43_1","unstructured":"Linux manpages. Aug 2021 [Accessed: Sep 2022]. bridge(8) \u2014 Linux manual page. Online https:\/\/man7.org\/linux\/man-pages\/man8\/bridge.8.html.  Linux manpages. Aug 2021 [Accessed: Sep 2022]. bridge(8) \u2014 Linux manual page. Online https:\/\/man7.org\/linux\/man-pages\/man8\/bridge.8.html."},{"key":"e_1_3_2_1_44_1","unstructured":"Linux manpages. Aug 2021 [Accessed: Sep 2022]. iptables(8) \u2014 Linux manual page. Online https:\/\/man7.org\/linux\/man-pages\/man8\/iptables.8.html.  Linux manpages. Aug 2021 [Accessed: Sep 2022]. iptables(8) \u2014 Linux manual page. Online https:\/\/man7.org\/linux\/man-pages\/man8\/iptables.8.html."},{"key":"e_1_3_2_1_45_1","unstructured":"Linux manpages. Aug 2021 [Accessed: Sep 2022]. veth(4) \u2014 Linux manual page. Online https:\/\/man7.org\/linux\/man-pages\/man4\/veth.4.html.  Linux manpages. Aug 2021 [Accessed: Sep 2022]. veth(4) \u2014 Linux manual page. Online https:\/\/man7.org\/linux\/man-pages\/man4\/veth.4.html."},{"key":"e_1_3_2_1_46_1","unstructured":"Microsoft. Jan 2021 [Accessed: Sep 2022]. Lessons learned in engineering Zero Trust networking. Blogpost https:\/\/www.microsoft.com\/en-us\/insidetrack\/lessons-learned-in-engineering-zero-trust-networking.  Microsoft. Jan 2021 [Accessed: Sep 2022]. Lessons learned in engineering Zero Trust networking. Blogpost https:\/\/www.microsoft.com\/en-us\/insidetrack\/lessons-learned-in-engineering-zero-trust-networking."},{"key":"e_1_3_2_1_47_1","unstructured":"P. Mockapetris. 1987. Domain names - concepts and facilities. STD\u00a013. RFC Editor. http:\/\/www.rfc-editor.org\/rfc\/rfc1034.txt http:\/\/www.rfc-editor.org\/rfc\/rfc1034.txt.  P. Mockapetris. 1987. Domain names - concepts and facilities. STD\u00a013. RFC Editor. http:\/\/www.rfc-editor.org\/rfc\/rfc1034.txt http:\/\/www.rfc-editor.org\/rfc\/rfc1034.txt."},{"key":"e_1_3_2_1_48_1","unstructured":"NetworkComputing. Mar 2005 [Accessed: Sep 2022]. A GSLB Reality Check. Online https:\/\/www.networkcomputing.com\/data-centers\/gslb-reality-check.  NetworkComputing. Mar 2005 [Accessed: Sep 2022]. A GSLB Reality Check. Online https:\/\/www.networkcomputing.com\/data-centers\/gslb-reality-check."},{"key":"e_1_3_2_1_49_1","unstructured":"Adis Nezirovic. May 2019 [Accessed: Sep 2022]. 5 Ways to Extend HAProxy with Lua. HAProxy blog https:\/\/www.haproxy.com\/blog\/5-ways-to-extend-haproxy-with-lua\/.  Adis Nezirovic. May 2019 [Accessed: Sep 2022]. 5 Ways to Extend HAProxy with Lua. HAProxy blog https:\/\/www.haproxy.com\/blog\/5-ways-to-extend-haproxy-with-lua\/."},{"key":"e_1_3_2_1_50_1","unstructured":"Nginx. [Accessed: Jun 2022]. NJS Scripting Language. Online https:\/\/nginx.org\/en\/docs\/njs\/.  Nginx. [Accessed: Jun 2022]. NJS Scripting Language. Online https:\/\/nginx.org\/en\/docs\/njs\/."},{"key":"e_1_3_2_1_51_1","unstructured":"NGINX Docs. [Accessed: Sep 2022]. Deploying NGINX and NGINX Plus on Docker. Online https:\/\/docs.nginx.com\/nginx\/admin-guide\/installing-nginx\/installing-nginx-docker\/.  NGINX Docs. [Accessed: Sep 2022]. Deploying NGINX and NGINX Plus on Docker. Online https:\/\/docs.nginx.com\/nginx\/admin-guide\/installing-nginx\/installing-nginx-docker\/."},{"key":"e_1_3_2_1_52_1","unstructured":"NLNetLabs. [Accessed: Sep 2022]. Unbound - About. Online https:\/\/www.nlnetlabs.nl\/projects\/unbound\/about\/.  NLNetLabs. [Accessed: Sep 2022]. Unbound - About. Online https:\/\/www.nlnetlabs.nl\/projects\/unbound\/about\/."},{"key":"e_1_3_2_1_53_1","volume-title":"WWDC 2020 video, https:\/\/developer.apple.com\/videos\/play\/wwdc2020\/10047","author":"Pauly T.","year":"2020","unstructured":"T. Pauly . 2020 [Accessed: Sep 2022]. Enable encrypted DNS . WWDC 2020 video, https:\/\/developer.apple.com\/videos\/play\/wwdc2020\/10047 . T. Pauly. 2020 [Accessed: Sep 2022]. Enable encrypted DNS. WWDC 2020 video, https:\/\/developer.apple.com\/videos\/play\/wwdc2020\/10047."},{"key":"e_1_3_2_1_54_1","volume-title":"WWDC 2020 video (11:57)","author":"Prakash R.","year":"2020","unstructured":"R. Prakash . 2020 [Accessed: Sep 2022]. Build trust through better privacy . WWDC 2020 video (11:57) , https:\/\/developer.apple.com\/videos\/play\/wwdc2020\/10676. R. Prakash. 2020 [Accessed: Sep 2022]. Build trust through better privacy. WWDC 2020 video (11:57), https:\/\/developer.apple.com\/videos\/play\/wwdc2020\/10676."},{"key":"e_1_3_2_1_55_1","unstructured":"Eric Rescorla. 2022. The Transport Layer Security (TLS) Protocol Version 1.3. Internet-Draft draft-ietf-tls-rfc8446bis-04. Internet Engineering Task Force. https:\/\/datatracker.ietf.org\/doc\/html\/draft-ietf-tls-rfc8446bis-04 Work in Progress.  Eric Rescorla. 2022. The Transport Layer Security (TLS) Protocol Version 1.3. Internet-Draft draft-ietf-tls-rfc8446bis-04. Internet Engineering Task Force. https:\/\/datatracker.ietf.org\/doc\/html\/draft-ietf-tls-rfc8446bis-04 Work in Progress."},{"key":"e_1_3_2_1_56_1","doi-asserted-by":"publisher","DOI":"10.6028\/NIST.SP.800-207"},{"key":"e_1_3_2_1_57_1","doi-asserted-by":"publisher","DOI":"10.17487\/RFC6960"},{"key":"e_1_3_2_1_58_1","unstructured":"Nick Sullivan. Mar 2017 [Accessed: Sep 2022]. Introducing Zero Round Trip Time Resumption (0-RTT). Cloudflare Blog post https:\/\/blog.cloudflare.com\/introducing-0-rtt\/.  Nick Sullivan. Mar 2017 [Accessed: Sep 2022]. Introducing Zero Round Trip Time Resumption (0-RTT). Cloudflare Blog post https:\/\/blog.cloudflare.com\/introducing-0-rtt\/."},{"key":"e_1_3_2_1_59_1","unstructured":"Traefik Labs. [Accessed: Sep 2022]. Concepts. Online https:\/\/doc.traefik.io\/traefik\/getting-started\/concepts\/.  Traefik Labs. [Accessed: Sep 2022]. Concepts. Online https:\/\/doc.traefik.io\/traefik\/getting-started\/concepts\/."},{"key":"e_1_3_2_1_60_1","unstructured":"Traefik Labs. [Accessed: Sep 2022]. Plugins and Traefik Pilot. Online https:\/\/doc.traefik.io\/traefik\/plugins\/.  Traefik Labs. [Accessed: Sep 2022]. Plugins and Traefik Pilot. Online https:\/\/doc.traefik.io\/traefik\/plugins\/."},{"key":"e_1_3_2_1_61_1","unstructured":"International\u00a0Telecommunication Union. Oct 2021. Information technology - Open Systems Interconnection - The Directory: Public-key and attribute certificate frameworks. Standard https:\/\/www.itu.int\/rec\/T-REC-X.509.  International\u00a0Telecommunication Union. Oct 2021. Information technology - Open Systems Interconnection - The Directory: Public-key and attribute certificate frameworks. Standard https:\/\/www.itu.int\/rec\/T-REC-X.509."},{"key":"e_1_3_2_1_62_1","unstructured":"Paul Vixie. 1999. Extension Mechanisms for DNS (EDNS0). RFC 2671. RFC Editor. http:\/\/www.rfc-editor.org\/rfc\/rfc2671.txt http:\/\/www.rfc-editor.org\/rfc\/rfc2671.txt.  Paul Vixie. 1999. Extension Mechanisms for DNS (EDNS0). RFC 2671. RFC Editor. http:\/\/www.rfc-editor.org\/rfc\/rfc2671.txt http:\/\/www.rfc-editor.org\/rfc\/rfc2671.txt."},{"key":"e_1_3_2_1_63_1","volume-title":"BeyondCorp: A New Approach to Enterprise Security. ;login","author":"Ward Rory","unstructured":"Rory Ward and Betsy Beyer . 2014. BeyondCorp: A New Approach to Enterprise Security. ;login : Vol. 39 , No. 6(2014), 6\u201311. Rory Ward and Betsy Beyer. 2014. BeyondCorp: A New Approach to Enterprise Security. ;login: Vol. 39, No. 6(2014), 6\u201311."},{"key":"e_1_3_2_1_64_1","unstructured":"S. Weiler and D. Blacka. 2013. Clarifications and Implementation Notes for DNS Security (DNSSEC). RFC 6840. Internet Engineering Task Force. 1\u201321 pages. http:\/\/www.rfc-editor.org\/rfc\/rfc6840.txt  S. Weiler and D. Blacka. 2013. Clarifications and Implementation Notes for DNS Security (DNSSEC). RFC 6840. Internet Engineering Task Force. 1\u201321 pages. http:\/\/www.rfc-editor.org\/rfc\/rfc6840.txt"}],"event":{"name":"ACSAC: Annual Computer Security Applications Conference","location":"Austin TX USA","acronym":"ACSAC"},"container-title":["Proceedings of the 38th Annual Computer Security Applications Conference"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3564625.3567968","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3564625.3567968","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,6,17]],"date-time":"2025-06-17T18:09:12Z","timestamp":1750183752000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3564625.3567968"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2022,12,5]]},"references-count":64,"alternative-id":["10.1145\/3564625.3567968","10.1145\/3564625"],"URL":"https:\/\/doi.org\/10.1145\/3564625.3567968","relation":{},"subject":[],"published":{"date-parts":[[2022,12,5]]},"assertion":[{"value":"2022-12-05","order":2,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}