Enc53: DNSSEC-Anchored Stateless Tickets for Post-Quantum Authoritative DNS

DNSSEC authenticates RRsets, but does not provide endpoint authentication or channel security. DNS-over-TLS DoT and DNS-over-QUIC DoQ can facilitate such needs, but were designed for the stub-to-resolver hop, where stable long-lived connections amortize the expensive initial setup. The...