System and method employing an agile network protocol for secure communications using secure domain names

A method of establishing a secure communication link, comprising:

• receiving, at a domain name server (DNS), a request to communicate securely, the request including an identifier of a client device and having been sent in response to a determination that a DNS request from the client device corresponds to a first computer configured to communicate securely;
• sending a second request to a server computer;
• in response to second request, the server computer:
• comparing the received client device identifier to one or more stored client device identifiers to determine a security level of the client device;
• determining a security level of the first computer;
• determining, based on a comparison of the security level of the client device and the security level of the first computer, whether the client device is authorized to communicate with the first computer;
• generating a resource used to establish the secure communication link between the client device and the first computer;
• generating a message in response to determining that the client device is not authorized to communicate with the first computer;
• and
• in response to determining that the client device is authorized to communicate with the first computer, making the resource available to the client device to automatically establish the secure communication link.

A system for establishing a secure communication link, comprising:

• storage configured to store client device identifiers;
• and
• one or more processors of a domain name server (DNS) being configured to:
• receive a request to communicate securely, the request including an identifier of a client device and having been sent in response to a determination that a DNS request from the client device corresponds to a first computer configured to communicate securely;
• send a second request to a server computer, the server computer comprising one or more processors being configured to, in response to the second request:
• compare the received client device identifier to one or more of the stored client device identifiers to determine a security level of the client device;
• determine a security level of the first computer;
• determine, based on a comparison of the security level of the client device and the security level of the first computer, whether the client device is authorized to communicate with the first computer;
• generate a resource used to establish the secure communication link between the client device and the first computer;
• generate a message in response to determining that the client device is not authorized to communicate with the first computer;
• and
• in response to determining that the client device is authorized to communicate with the first computer, make the resource available to the client device to automatically establish the secure communication link.