%% You should probably cite draft-ietf-tcpinc-tcpeno instead of this I-D. @techreport{bittau-tcpinc-tcpeno-02, number = {draft-bittau-tcpinc-tcpeno-02}, type = {Internet-Draft}, institution = {Internet Engineering Task Force}, publisher = {Internet Engineering Task Force}, note = {Work in Progress}, url = {https://datatracker.ietf.org/doc/draft-bittau-tcpinc-tcpeno/02/}, author = {Andrea Bittau and Dan Boneh and Daniel B. Giffin and Mark J. Handley and David Mazieres and Eric W. Smith}, title = {{TCP-ENO: Encryption Negotiation Option}}, pagetotal = 21, year = 2015, month = sep, day = 10, abstract = {Despite growing adoption of TLS {[}RFC5246{]}, a significant fraction of TCP traffic on the Internet remains unencrypted. The persistence of unencrypted traffic can be attributed to at least two factors. First, some legacy protocols lack a signaling mechanism (such as a "STARTTLS" command) by which to convey support for encryption, making incremental deployment impossible. Second, legacy applications themselves cannot always be upgraded, requiring a way to implement encryption transparently entirely within the transport layer. The TCP Encryption Negotiation Option (TCP-ENO) addresses both of these problems through a new TCP option kind providing out-of-band, fully backward-compatible negotiation of encryption.}, }