Opportunistic Security: Some Protection Most of the Time. - Viktor Dukhovni (RFC, 2014)

The DNS-Based Authentication of Named Entities (DANE) Protocol: Updates and Operational Guidance. - Viktor Dukhovni; Wes Hardaker (RFC, 2015)

SMTP Security via Opportunistic DNS-Based Authentication of Named Entities (DANE) Transport Layer Security (TLS). - Viktor Dukhovni; Wes Hardaker (RFC, 2015)

DROWN: Breaking TLS Using SSLv2. - Nimrod Aviram; Sebastian Schinzel; Juraj Somorovsky; Nadia Heninger; Maik Dankel; Jens Steube; Luke Valenta; David Adrian; J. Alex Halderman; Viktor Dukhovni; Emilia Käsper; Shaanan Cohney; et al. (USENIX Security Symposium, 2016)

TLS DNSSEC Chain Extension. - Viktor Dukhovni; Shumon Huque; Willem Toorop; Paul Wouters; Melinda Shore (RFC, 2021)

Guidance for NSEC3 Parameter Settings. - Wes Hardaker; Viktor Dukhovni (RFC, 2022)