PROVISIONING PRIVACY-ENABLED CACHED DNS SERVICES VIA AN ENROLLMENT OVER SECURE TRANSPORT 'EST' DOMAIN NAME SYSTEM DNS SERVER OF A HOME GATEWAY

摘要

There is disclosed in one example an enrollment over secure transport, EST-capable gateway device (108), including: a hardware platform including a processor and a memory; a first network interface to communicatively couple to an external network (172), including an external DNS server (160); a second network interface to communicatively couple to a home network (170); a caching DNS server (114) including a local DNS cache, and logic to provide DNS services to the home network (170); and an EST proxy (108) to authenticate to a local endpoint (110, 132, 134, 136) on the home network (170), provision a DNS server certificate on the local endpoint (110, 132, 134, 136) , provision an authentication domain name, ADN, on the local endpoint (110, 132, 134, 136) , and provide encrypted domain name system, DNS, services to the local endpoint (110, 132, 134, 136) .