DNS-based Authentication of Named Entities

DNS-based Authentication of Named Entities (DANE) is a security protocol that allows authentication of digital certificates using the Domain Name System (DNS). DANE combines the use of DNSSEC (Domain Name System Security Extensions) with the certificate management capabilities of Transport Layer Security (TLS) to provide an additional layer of security for services using SSL/TLS.