--- /dev/null
+***************
+Quick Reference
+***************
+
+* `Installation <https://www.knot-resolver.cz/download/>`_
+* :ref:`TLS Forwarding <tls-forwarding>`
+* :ref:`network-configuration`
+* :ref:`Module: policy <mod-policy>`
.. note:: The module (and ``kres``) expects domain names in wire format, not textual representation. So each label in name is prefixed with its length, e.g. "example.com" equals to ``"\7example\3com"``. You can use convenience function ``todname('example.com')`` for automatic conversion.
+.. _tls-forwarding:
+
Forwarding over TLS protocol (DNS-over-TLS)
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
Policy `TLS_FORWARD` allows you to forward queries using `Transport Layer Security`_ protocol, which hides the content of your queries from an attacker observing the network traffic. Further details about this protocol can be found in :rfc:`7858` and `IETF draft dprive-dtls-and-tls-profiles`_.