METHOD AND APPARATUS FOR CLIENT-HOST COMMUNICATION OVER A COMPUTER NETWORK

摘要

According to the invention, a method and apparatus are provided for dynamically configuring authorized clients with the address of a protected host and the key and address of an intermediate device (e.g., encrypting firewall, encrypting router, secure gatewa y) which is protecting a number of hosts on a private network located topologically behind t hat intermediate device. The registered name server for a domain is configured to return a new re source record type, herein called an SX record, in response to requests for information needed for secure communications with protected hosts in that domain. The resolver on (or otherwis e associated with) the authorized client is configured to use the data in the SX record to dy namically update the information used by the client to handle secure communications.