互联网资源标识和寻址技术研究
|
摘要
互联网是资源、网络协议、资源标识与寻址机制组成的信息空间。资源包括有形的物理资源，比如网络服务器、存储设备等，也包括虚拟资源，比如信息资源、某种网络服务等。为了充分开发利用好互联网上的各类资源，有效的资源标识与寻址机制至关重要。目前互联网上应用最广泛的资源标识与寻址技术就是域名技术，可以说域名技术是互联网上最成功的技术之一，是互联网的基础性技术，几乎任何一种互联网应用都跟域名有关。简单、高效是域名技术的特点，也是域名技术获得成功的一个主要原因。但是随着互联网的发展，更多应用和资源类型出现，域名技术要满足全部互联网资源标识与寻址的需求有些力不从心。
本文以对域名技术的研究为基础，指出了域名技术的不足，并针对这些不足提出了相应的一些解决方法。结合当前互联网发展应用的情况，设计了一种统一的互联网资源标识与寻址机制，并将这种机制应用于域名系统。本文的主要贡献和创新点有：
1、研究了中文域名繁简体等效的问题，提出了基于IDN-Admin算法实现中文域名繁简等效的解决方案，设计了实现算法以及用于方案实现的中文域名异体等效对照表。
2、研究了ENUM用户隐私信息的保护，对ENUM记录资源访问进行权限控制，提出了基于用户认证的ENUM记录级授权访问解决方案。
3、提出了基于DNS的网络关键词寻址技术及规范。
4、研究了IPv6环境下的DNS技术特点。
5、提出了一种统一的互联网资源标识与寻址技术：通用名字服务系统，并将这种技术应用于DNS实现。
Internet is the information space with the collection of resources, network protocols, resource naming and address mechanism.The resources include not only the physical resources such as the network servers and storage devices, but also the virtual resources such as information and some network services.How to build the efficient address mapping mechanism and identify these resources is crucial for efficient use of all kinds of resources available on the Internet.Currently the most popular technology for resource naming and addressing is the domain name technology, which is one of the most successful technologies. Domain name technology is the base of Internet, with which many Internet applications relate. Simplicity and efficiency are the key characters of domain name technologies, which are also the main reasons of why domain technologies are so successful. With the explosive growth of Internet, more and more types of applications and services are available. Domain name technology is not capable enough to identify and address all these resources.
This paper describes the domain name technology and its disadvantages. To deal with these disadvantages, this paper gives some solutions. We design a new unified mechanism of resource naming and addressing, which improves the functions of domain name system and is applied to domain name system.
The main contributions and creative ideas are:
1. Do some research on the issues of equal of simple Chinese characters and traditional Chinese characters, propose a solution based on the algorithm of IDN-Admin to implement the equal of simple Chinese characters and traditional Chinese characters, and design a Chinese Domain Name Characters Variant Table and its algorithm.
2. Do some research on the protection of the private information of ENUM users and the access control of ENUM resource record, and propose a solution based on the authentication of ENUM record access.
3. Propose a keyword addressing technology and its specification based on
DNS technology.
4. Do some research on the characters of DNS technology within IPv6 environments.
5. Propose an unified Internet resource naming and addressing technology named with uniform naming service system which is applied into DNS.
本文以对域名技术的研究为基础，指出了域名技术的不足，并针对这些不足提出了相应的一些解决方法。结合当前互联网发展应用的情况，设计了一种统一的互联网资源标识与寻址机制，并将这种机制应用于域名系统。本文的主要贡献和创新点有：
1、研究了中文域名繁简体等效的问题，提出了基于IDN-Admin算法实现中文域名繁简等效的解决方案，设计了实现算法以及用于方案实现的中文域名异体等效对照表。
2、研究了ENUM用户隐私信息的保护，对ENUM记录资源访问进行权限控制，提出了基于用户认证的ENUM记录级授权访问解决方案。
3、提出了基于DNS的网络关键词寻址技术及规范。
4、研究了IPv6环境下的DNS技术特点。
5、提出了一种统一的互联网资源标识与寻址技术：通用名字服务系统，并将这种技术应用于DNS实现。
Internet is the information space with the collection of resources, network protocols, resource naming and address mechanism.The resources include not only the physical resources such as the network servers and storage devices, but also the virtual resources such as information and some network services.How to build the efficient address mapping mechanism and identify these resources is crucial for efficient use of all kinds of resources available on the Internet.Currently the most popular technology for resource naming and addressing is the domain name technology, which is one of the most successful technologies. Domain name technology is the base of Internet, with which many Internet applications relate. Simplicity and efficiency are the key characters of domain name technologies, which are also the main reasons of why domain technologies are so successful. With the explosive growth of Internet, more and more types of applications and services are available. Domain name technology is not capable enough to identify and address all these resources.
This paper describes the domain name technology and its disadvantages. To deal with these disadvantages, this paper gives some solutions. We design a new unified mechanism of resource naming and addressing, which improves the functions of domain name system and is applied to domain name system.
The main contributions and creative ideas are:
1. Do some research on the issues of equal of simple Chinese characters and traditional Chinese characters, propose a solution based on the algorithm of IDN-Admin to implement the equal of simple Chinese characters and traditional Chinese characters, and design a Chinese Domain Name Characters Variant Table and its algorithm.
2. Do some research on the protection of the private information of ENUM users and the access control of ENUM resource record, and propose a solution based on the authentication of ENUM record access.
3. Propose a keyword addressing technology and its specification based on
DNS technology.
4. Do some research on the characters of DNS technology within IPv6 environments.
5. Propose an unified Internet resource naming and addressing technology named with uniform naming service system which is applied into DNS.
引文
[1] T. Berners-Lee, R. Fielding, L. Masinter, "Uniform Resource Identifier (URI): Generic Syntax", IETF RFC 3986, January 2005.
[2] M. Duerst, M. Suignard, "Internationalized Resource Identifiers", IETF RFC 3987, January 2005.
[3] R. Moats, "URN Syntax", IETF RFC 2141, May 1997
[4] M. Mealling, R. Denenberg, "Uniform Resource Identifiers (URIs), URLs, and Uniform Resource Names (URNs): Clarifications and Recommendations", IETF RFC 3305, August 2002.
[5] Keith Shafer, Smart Weibel, Erik Jul, Jon Fausey, "Introduction to Persistent Uniform Resource Locators", http://purl.oclc.org/docs/inet96.html
[6] Drunmond Reed, Dave McAlpin, "Introduction to XRIs", OASIS, March 2005.
[7] Drunmond Reed, Dave McAlpin, "Extensible Resource Identifier (XRI) Syntax V2.0", OASIS, March 2005,
[8] Gabe Wachob, "Extensible Resource Identifier (XRI) Resolution V2.0", OASIS, March 2005.
[9] "UDDI Version 3 Specification", OASIS
[10] 柴晓路，Wleb服务架构与开放互操作技术，2003．06第一版，清华大学出版社
[11] Mockapetris, "Domain Names-Concepts and Facilities", IETF RFC1034, November 1987.
[12] Mockapetris, "Domain Names-Implementation and Specification", IETF RFC1035, November 1987.
[13] D. Crocker, Ed., P. Overell, "Augmented BNF for Syntax Specifications: ABNF", IETF RFC 2234, November 1997.
[14] P. Faltstrom, P. Hoffman, A. Costello, "Intemationalizing Domain Names in Applications (IDNA)", IETF RFC3490, March 2003
[15] P. Hoffman, M. Blanchet, "Nameprep: A Stringprep Profile for Internationalized Domain Names (IDN)", IETF RFC3491, March 2003
[16] The Unicode Consortium, "The Unicode Standard-Version3.0", ISBN 0-201-61633-5. Unicode Standard Annex #28, http://www.unicode.org/unicode/reports/tr28/defines Version 3.2 of The Unicode Standard.
[17] Jack Halpern, Jouni Kerman, "Pitfalls and Complexities of Chinese to Chinese Conversion", http://www.cjk.org/cj k/c2c/c2c.pdf.
[18] 国家语言文字工作委员会，“简化字总表”，1986．10．
[19] 国家语言文字工作委员会汉字处，“现代汉语常用字表”，语文出版社，1988．01．
[20] K. Konishi, K. Huang, H. Qian, Y. Ko, "Joint Engineering Team (JET) Guidelines for Internationalized Domain Names (IDN) Registration and Administration for Chinese, Japanese, and Korean", IETF RFC3743, April 2004
[21] H. Alvestrand, "Tags for the Identification of Languages", IETF RFC3066, Januray 2001.
[22] Unicode Han Database, Unicode Consortium, ftp://ftp.unicode.org/Public/UNIDATA/Unihan.txt
[23] P. Faltstrom, M. Mealling. "The E. 164 to Uniform Resource Identifiers (URI) Dynamic Delegation Discovery System (DDDS) Application (ENUM)". IETF, RFC3761, April 2004
[24] 毛伟，王艳峰，王峰．“新一代互联网资源标识与寻址技术”．计算机应用研究，2004，21(4)
[25] J. Klensin, Ed., IAB. "The History and Context of Telephone Number Mapping (ENUM) Operational Decisions: Informational Documents Contributed to ITU-T Study Group 2 (SG2)" [S]. IETF, RFC3245, March 2002
[26] 李晓东，阎保平．“基于DNS的ENUM技术及其应用研究”[J]．微电子学与计算机，2003，20(1)
[27] 王峰，钱华林．“ENUM系统以及解析服务器的研究”[J]．计算机应用研究，2003，20(7)
[28] 屈军锁、徐展琦．“ENUM技术及其商用面临的问题”．现代电信科技，2004年10月第10期(34-37)
[29] M. Mealling, R. Daniel. "The Naming Authority Pointer (NAPTR) DNS Resource Record" IS]. IETF, RFC2915, September 2000
[30] M. Mealling. "Dynamic Delegation Discovery System (DDDS) Part One: The Comprehensive DDDS". IETF, RFC3401, October 2002
[31] M. Mealling. "Dynamic Delegation Discovery System (DDDS) Part Two: The Algorithm". IETF, RFC3402, October 2002
[32] M. Mealling. "Dynamic Delegation Discovery System (DDDS) Part Three: The Domain Name System (DNS) Database". IETF, RFC3403, October 2002
[33] M. Mealling. "Dynamic Delegation Discovery System (DDDS) Part Four: The Uniform Resource Identifiers (URI)". IETF, RFC3404, October 2002
[34] 温锋．“NGN中ENUM技术的应用”．电信建设，2004年第2期(29-32)
[35] 曹蓟光．“ENUM顶级域问题浅论”．现代电信科技，2004年8月第8期(36-39)
[36] 张捷．“ITU-T对ENUM的研究进展”．电信网技术，2002年2月第1期(68-70)
[37] 周江锋，谢宇治．“ENUM的安全性和隐私保护问题探讨”[J]．电信快报，2004年第12期(23-25)
[38] B. Wellington. "Domain Name System Security (DNSSEC) Signing Authority". IETF, RFC3008, November 2000
[39] E. Lewis. "Notes from the State-Of-The-Technology: DNSSEC". IETF, RFC3130, June 2001
[40] D. Conrad. "Indicating Resolver Support of DNSSEC". IETF, RFC3225, December 2001
[41] J. Schlyter, Ed.. "DNS Security (DNSSEC) NextSECure (NSEC) RDATA Format". IETF, RFC3845, August 2004
[42] O. Kolkman, J. Schlyter, E. Lewis. "Domain Name System KEY (DNSKEY) Resource Record (RR) Secure Entry Point (SEP) Flag". IETF, RFC3757, April 2004
[43] R. Arends、R. Austein、M. Larson、D. Massey、S. Rose. "Resource Records for the DNS Security Extensions". IETF, RFC4034, March 2005
[44] R. Mends, R. Austein, M. Larson, D. Massey, S. Rose. "Protocol Modifications for the DNS Security Extensions". IETF, RFC4035, March 2005
[45] 王潇潇，牟浩江．“利用DNS安全扩展进行公钥发布”．西安石油大学学报，2004年9月第19卷第5期(65-67)
[46] Searchable Internet Resource Names (SIREN), IRTF Research Groups, http://www.irtf.org/charters/siren.html.
[47] 关键词网络定位服务解析协议规范，中国互联网络信息中心，http://www.cnnic.cn/html/Dir/2003/10/28/1099.htm
[48] R. Hinden, S. Deering, "Internet Protocol Version 6 (IPv6) Addressing Architecture", IETF RFC 3513, April 2003
[49] S. Thomson, "DNS Extensions to support IP version 6", IETF RFC1886, December 1995
[50] M. Crawford, "DNS Extensions to Support IPv6 Address Aggregation and Renumbering", IETF RFC2874, July 2000
[51] 张鸿，钱华林，“IPv6对域名系统的需求及其解决方法的研究”，微电子学与计算机，2003，第20期
[52] T. Narten, "Neighbor Discovery for IP Version 6 (IPv6)", IETF RFC2461, December 1998
[53] S. Thomson, "IPv6 Stateless Address Autoconfiguration", IETF RFC2462, December 1998
[54] Dave Thaler, "Analysis of DNS Server Discovery Mechanisms for IPv6", IETF draft-ietf-ipngwg-dns-discovery-analysis-00.txt, July 2001
[55] G. Tsirtsis, "Network Address Translation - Protocol Translation (NAT-PT)", IETF RFC2766, February 2000
[56] S. Sun, L. Lannom, B. Boesch, "Handle System Overview", IETF RFC3650, November 2003
[57] S. Sun, S. Reilly, L. Lannom, "Handle System Namespace and Service Definition", IETF RFC3651, November 2003
[58] S. Sun, S. Reilly, L. Lannom, J. Petrone, "Handle System Protocol (ver 2.1) Specification", IETF RFC3652, November 2003
[59] 毛伟，孙洵，王峰，“一种互联网资源标识与寻址技术：Handle System”，计算机应用研究，2004，第5期
[60] X. LEE, E. CHEN, J. Klensin, N. HSU, W. MAO, "Registration and Administration Guideline for Chinese Domain Names", IETF draft-xdlee-idn-cdnadmin-05.txt, Sep. 27, 2005
[61] Paul Albitz, Cricket Liu, "DNS and Bind", O'Reilly
[62] 毛伟、邓翔，“多语种域名及中文域名技术的研究与实现”，微电子学与计算机2003年第五期
[63] John C Klensin, "A Search-based access model for the DNS", IETF Internet Draft, Work in Progress, draft-klensin-dns-search-05.txt, May 2001.
[64] J. Klensin, "Role of the Domain Name System (DNS)", IETF RFC3467, February 2003
[65] C. Partridge, T. Mendez, W. Milliken, "Host Anycasting Service", IETF 1546, November 1993
[66] Y. Rekhter, T. J. Watson, T. Li, "A Border Gateway Protocol 4 (BGP-4)", IETF 1771, March 1995
[67] R. Droms, "Dynamic Host Configuration Protocol", IETF RFC 1541, March 1997
[68] Internet Systems Consortium, ISC BIND, www.isc.org
[69] CNNIC, ".cn Chinese Character Table", IANA, http://www.iana.org/assignments/idn/cn-chinese.html, 31 March 2005
[70] ITU-T Rec. X. 509, "The Directory: Authentication Framework", 1993.
[71] J. Kohl, C. Neuman, "The Kerberos Network Authentication Service (V5)", IETF RFC 1510, September 1993
[72] T. Dierks, C. Allen, "The TLS Protocol Version 1.0", IETF RFC 2246, January 1999
[2] M. Duerst, M. Suignard, "Internationalized Resource Identifiers", IETF RFC 3987, January 2005.
[3] R. Moats, "URN Syntax", IETF RFC 2141, May 1997
[4] M. Mealling, R. Denenberg, "Uniform Resource Identifiers (URIs), URLs, and Uniform Resource Names (URNs): Clarifications and Recommendations", IETF RFC 3305, August 2002.
[5] Keith Shafer, Smart Weibel, Erik Jul, Jon Fausey, "Introduction to Persistent Uniform Resource Locators", http://purl.oclc.org/docs/inet96.html
[6] Drunmond Reed, Dave McAlpin, "Introduction to XRIs", OASIS, March 2005.
[7] Drunmond Reed, Dave McAlpin, "Extensible Resource Identifier (XRI) Syntax V2.0", OASIS, March 2005,
[8] Gabe Wachob, "Extensible Resource Identifier (XRI) Resolution V2.0", OASIS, March 2005.
[9] "UDDI Version 3 Specification", OASIS
[10] 柴晓路，Wleb服务架构与开放互操作技术，2003．06第一版，清华大学出版社
[11] Mockapetris, "Domain Names-Concepts and Facilities", IETF RFC1034, November 1987.
[12] Mockapetris, "Domain Names-Implementation and Specification", IETF RFC1035, November 1987.
[13] D. Crocker, Ed., P. Overell, "Augmented BNF for Syntax Specifications: ABNF", IETF RFC 2234, November 1997.
[14] P. Faltstrom, P. Hoffman, A. Costello, "Intemationalizing Domain Names in Applications (IDNA)", IETF RFC3490, March 2003
[15] P. Hoffman, M. Blanchet, "Nameprep: A Stringprep Profile for Internationalized Domain Names (IDN)", IETF RFC3491, March 2003
[16] The Unicode Consortium, "The Unicode Standard-Version3.0", ISBN 0-201-61633-5. Unicode Standard Annex #28, http://www.unicode.org/unicode/reports/tr28/defines Version 3.2 of The Unicode Standard.
[17] Jack Halpern, Jouni Kerman, "Pitfalls and Complexities of Chinese to Chinese Conversion", http://www.cjk.org/cj k/c2c/c2c.pdf.
[18] 国家语言文字工作委员会，“简化字总表”，1986．10．
[19] 国家语言文字工作委员会汉字处，“现代汉语常用字表”，语文出版社，1988．01．
[20] K. Konishi, K. Huang, H. Qian, Y. Ko, "Joint Engineering Team (JET) Guidelines for Internationalized Domain Names (IDN) Registration and Administration for Chinese, Japanese, and Korean", IETF RFC3743, April 2004
[21] H. Alvestrand, "Tags for the Identification of Languages", IETF RFC3066, Januray 2001.
[22] Unicode Han Database, Unicode Consortium, ftp://ftp.unicode.org/Public/UNIDATA/Unihan.txt
[23] P. Faltstrom, M. Mealling. "The E. 164 to Uniform Resource Identifiers (URI) Dynamic Delegation Discovery System (DDDS) Application (ENUM)". IETF, RFC3761, April 2004
[24] 毛伟，王艳峰，王峰．“新一代互联网资源标识与寻址技术”．计算机应用研究，2004，21(4)
[25] J. Klensin, Ed., IAB. "The History and Context of Telephone Number Mapping (ENUM) Operational Decisions: Informational Documents Contributed to ITU-T Study Group 2 (SG2)" [S]. IETF, RFC3245, March 2002
[26] 李晓东，阎保平．“基于DNS的ENUM技术及其应用研究”[J]．微电子学与计算机，2003，20(1)
[27] 王峰，钱华林．“ENUM系统以及解析服务器的研究”[J]．计算机应用研究，2003，20(7)
[28] 屈军锁、徐展琦．“ENUM技术及其商用面临的问题”．现代电信科技，2004年10月第10期(34-37)
[29] M. Mealling, R. Daniel. "The Naming Authority Pointer (NAPTR) DNS Resource Record" IS]. IETF, RFC2915, September 2000
[30] M. Mealling. "Dynamic Delegation Discovery System (DDDS) Part One: The Comprehensive DDDS". IETF, RFC3401, October 2002
[31] M. Mealling. "Dynamic Delegation Discovery System (DDDS) Part Two: The Algorithm". IETF, RFC3402, October 2002
[32] M. Mealling. "Dynamic Delegation Discovery System (DDDS) Part Three: The Domain Name System (DNS) Database". IETF, RFC3403, October 2002
[33] M. Mealling. "Dynamic Delegation Discovery System (DDDS) Part Four: The Uniform Resource Identifiers (URI)". IETF, RFC3404, October 2002
[34] 温锋．“NGN中ENUM技术的应用”．电信建设，2004年第2期(29-32)
[35] 曹蓟光．“ENUM顶级域问题浅论”．现代电信科技，2004年8月第8期(36-39)
[36] 张捷．“ITU-T对ENUM的研究进展”．电信网技术，2002年2月第1期(68-70)
[37] 周江锋，谢宇治．“ENUM的安全性和隐私保护问题探讨”[J]．电信快报，2004年第12期(23-25)
[38] B. Wellington. "Domain Name System Security (DNSSEC) Signing Authority". IETF, RFC3008, November 2000
[39] E. Lewis. "Notes from the State-Of-The-Technology: DNSSEC". IETF, RFC3130, June 2001
[40] D. Conrad. "Indicating Resolver Support of DNSSEC". IETF, RFC3225, December 2001
[41] J. Schlyter, Ed.. "DNS Security (DNSSEC) NextSECure (NSEC) RDATA Format". IETF, RFC3845, August 2004
[42] O. Kolkman, J. Schlyter, E. Lewis. "Domain Name System KEY (DNSKEY) Resource Record (RR) Secure Entry Point (SEP) Flag". IETF, RFC3757, April 2004
[43] R. Arends、R. Austein、M. Larson、D. Massey、S. Rose. "Resource Records for the DNS Security Extensions". IETF, RFC4034, March 2005
[44] R. Mends, R. Austein, M. Larson, D. Massey, S. Rose. "Protocol Modifications for the DNS Security Extensions". IETF, RFC4035, March 2005
[45] 王潇潇，牟浩江．“利用DNS安全扩展进行公钥发布”．西安石油大学学报，2004年9月第19卷第5期(65-67)
[46] Searchable Internet Resource Names (SIREN), IRTF Research Groups, http://www.irtf.org/charters/siren.html.
[47] 关键词网络定位服务解析协议规范，中国互联网络信息中心，http://www.cnnic.cn/html/Dir/2003/10/28/1099.htm
[48] R. Hinden, S. Deering, "Internet Protocol Version 6 (IPv6) Addressing Architecture", IETF RFC 3513, April 2003
[49] S. Thomson, "DNS Extensions to support IP version 6", IETF RFC1886, December 1995
[50] M. Crawford, "DNS Extensions to Support IPv6 Address Aggregation and Renumbering", IETF RFC2874, July 2000
[51] 张鸿，钱华林，“IPv6对域名系统的需求及其解决方法的研究”，微电子学与计算机，2003，第20期
[52] T. Narten, "Neighbor Discovery for IP Version 6 (IPv6)", IETF RFC2461, December 1998
[53] S. Thomson, "IPv6 Stateless Address Autoconfiguration", IETF RFC2462, December 1998
[54] Dave Thaler, "Analysis of DNS Server Discovery Mechanisms for IPv6", IETF draft-ietf-ipngwg-dns-discovery-analysis-00.txt, July 2001
[55] G. Tsirtsis, "Network Address Translation - Protocol Translation (NAT-PT)", IETF RFC2766, February 2000
[56] S. Sun, L. Lannom, B. Boesch, "Handle System Overview", IETF RFC3650, November 2003
[57] S. Sun, S. Reilly, L. Lannom, "Handle System Namespace and Service Definition", IETF RFC3651, November 2003
[58] S. Sun, S. Reilly, L. Lannom, J. Petrone, "Handle System Protocol (ver 2.1) Specification", IETF RFC3652, November 2003
[59] 毛伟，孙洵，王峰，“一种互联网资源标识与寻址技术：Handle System”，计算机应用研究，2004，第5期
[60] X. LEE, E. CHEN, J. Klensin, N. HSU, W. MAO, "Registration and Administration Guideline for Chinese Domain Names", IETF draft-xdlee-idn-cdnadmin-05.txt, Sep. 27, 2005
[61] Paul Albitz, Cricket Liu, "DNS and Bind", O'Reilly
[62] 毛伟、邓翔，“多语种域名及中文域名技术的研究与实现”，微电子学与计算机2003年第五期
[63] John C Klensin, "A Search-based access model for the DNS", IETF Internet Draft, Work in Progress, draft-klensin-dns-search-05.txt, May 2001.
[64] J. Klensin, "Role of the Domain Name System (DNS)", IETF RFC3467, February 2003
[65] C. Partridge, T. Mendez, W. Milliken, "Host Anycasting Service", IETF 1546, November 1993
[66] Y. Rekhter, T. J. Watson, T. Li, "A Border Gateway Protocol 4 (BGP-4)", IETF 1771, March 1995
[67] R. Droms, "Dynamic Host Configuration Protocol", IETF RFC 1541, March 1997
[68] Internet Systems Consortium, ISC BIND, www.isc.org
[69] CNNIC, ".cn Chinese Character Table", IANA, http://www.iana.org/assignments/idn/cn-chinese.html, 31 March 2005
[70] ITU-T Rec. X. 509, "The Directory: Authentication Framework", 1993.
[71] J. Kohl, C. Neuman, "The Kerberos Network Authentication Service (V5)", IETF RFC 1510, September 1993
[72] T. Dierks, C. Allen, "The TLS Protocol Version 1.0", IETF RFC 2246, January 1999