IP-HTTPS the preferred transition technology for Direct Access?

Hello,

I'm planning our Direct Access deployment and have a few questions.

1) Is this true: http://blogs.technet.com/b/tip_of_the_day/archive/2013/11/11/tip-of-the-day-direct-access-and-ip-https.aspx

is IP-HTTPS the preferred method now?

2) If I place my DA Servers external interface in a DMZ and NAT it. That means it will only use IP-HTTPS, correct?

3) If that's the case is there a need for two consecutive private IPs that are NATd to 2 public IPs?

Thanks.