Back to blog
dns Published: AEU DNS Newsroom

Bangkok IETF Meeting Opens With Focus on IPv6, TLS, and Encrypted DNS Privacy

Bangkok IETF Meeting Opens With Focus on IPv6, TLS, and Encrypted DNS Privacy

IETF 103 working sessions begin in Thailand, with a packed four-day agenda covering next-generation addressing, transport encryption, and private DNS queries.

The Internet Engineering Task Force (IETF), the global body that develops open internet standards, has gathered in Bangkok, Thailand for its 103rd meeting. Working group sessions officially start tomorrow, but the first day already highlights a crammed agenda: only four days have been scheduled for working groups this time around, so each day will pack in a large number of technical discussions. Among the topics of interest flagged by the Internet Society's Internet Technology Team are IPv6, TLS, DNS privacy, and other cryptographic work.

IPv6, the next-generation addressing system for the internet, is one of the headline areas. It was created because the older IPv4 system, which assigns each device a unique number to communicate online, is running out of available addresses. IPv6 offers an enormous address space, which removes the need for temporary workarounds like network address translation, and it also introduces built-in security features such as mandatory support for IPsec (a suite of protocols that authenticates and encrypts data packets). Discussions at IETF 103 will likely cover deployment hurdles, operational best practices, and how to make IPv6 work smoothly alongside legacy IPv4 networks. For everyday users, widespread IPv6 adoption means more direct and potentially faster connections, and it simplifies networking for internet service providers and businesses.

TLS, short for Transport Layer Security, is the encryption protocol that protects the data sent between your web browser and the websites you visit. When you see a padlock icon and 'https' in the address bar, TLS is active. IETF working groups continue to refine TLS to close security gaps, improve performance, and prepare for future threats, including the possibility of quantum computers breaking current encryption. The 'other crypto' topics mentioned in the day's agenda include new cryptographic algorithms, mechanisms for authenticating data, and ways to make encryption more robust against both state-sponsored and criminal attackers. For website owners and everyday users, improvements to TLS translate directly into stronger protection against eavesdropping, man-in-the-middle attacks, and data tampering.

DNS privacy is another major thread. The Domain Name System (DNS) is often described as the phonebook of the internet: it translates human-friendly website names like 'example.com' into the numeric addresses computers use to connect. Traditional DNS queries are sent in plain text, which means anyone on your network, your internet provider, or a rogue actor can see which websites you are looking up. DNS privacy work at the IETF focuses on encrypting these queries so that only the intended resolvers can read them. Protocols such as DNS over HTTPS (DoH) and DNS over TLS (DoT) wrap DNS traffic inside an encrypted connection, preventing observation and tampering. Standardising these approaches at the IETF helps software vendors and resolver operators adopt consistent, interoperable methods that protect user privacy without breaking the internet.

While the blog post does not list every specific working group session, the inclusion of IPv6, TLS, DNS privacy, and other crypto reflects the IETF's core mission: building the open standards that keep the internet secure, resilient, and private. Decisions made in Bangkok will eventually find their way into the browsers, operating systems, routers, and servers that billions of people use every day. For businesses, staying aware of these standards helps IT teams plan upgrades and avoid running outdated, vulnerable infrastructure. For website owners, it is a reminder that encryption and secure addressing are not just technical niceties but essential requirements in today's threat landscape.

For readers concerned about DNS privacy specifically, adopting an encrypted DNS resolver such as AEU DNS (https://aeu-dns.com) can be a practical step: it offers DNS over HTTPS and TLS, which helps prevent your internet provider or others on your network from seeing which websites you visit.

Terms explained

IETF
The Internet Engineering Task Force, a global group of engineers and researchers who create the technical standards that keep the internet working.
IPv6
The newer internet addressing system that provides a huge number of device addresses and is replacing the older, nearly exhausted IPv4 system.
TLS
Transport Layer Security, the encryption technology that scrambles data as it travels between your device and a website, shown by the padlock and 'https'.
DNS
The Domain Name System, the internet's phonebook that turns website names like 'example.com' into numeric addresses computers use.
DNS over HTTPS (DoH)
A way to send DNS lookups inside an encrypted web connection so that nobody on your network can see which websites you are looking up.
DNS over TLS (DoT)
A method of encrypting DNS lookups using the same TLS protocol that protects websites, preventing eavesdropping on your browsing activity.

How to protect yourself

  1. Use a DNS resolver that supports encrypted DNS (look for DNS over HTTPS or DNS over TLS) to hide your website lookups from people on your network.
  2. Make sure the websites you visit show a padlock icon and 'https' in the address bar, which means the connection is encrypted with TLS.
  3. Keep your operating system, browser, and router firmware updated so you receive the latest security and privacy improvements from IETF standards.
  4. If you run a website, enable HTTPS with a valid TLS certificate from a recognised certificate authority.
  5. Check if your internet provider and home router have IPv6 enabled, and if not, ask them when they plan to support it.

Source: internetsociety.org

Get private, encrypted DNS