{
  "$schema": "/api/schemas/documents.schema.json",
  "apiVersion": "1.1.0",
  "lastModified": "2026-10-13T19:03:45.976Z",
  "sourcePath": "src/main/data/docs",
  "docId": "RFC7029",
  "document": {
    "abstract": "As the Extensible Authentication Protocol (EAP) evolves, EAP peers rely increasingly on information received from the EAP server. EAP extensions such as channel binding or network posture information are often carried in tunnel methods; peers are likely to rely on this information. Cryptographic binding is a facility described in RFC 3748 that protects tunnel methods against man-in-the-middle attacks. However, cryptographic binding focuses on protecting the server rather than the peer. This memo explores attacks possible when the peer is not protected from man-in-the-middle attacks and recommends cryptographic binding based on an Extended Master Session Key, a new form of cryptographic binding that protects both peer and server along with other mitigations.",
    "abstract$meta": {
      "confidence": "high",
      "note": "Parsed from RFC index XML abstract",
      "originalValue": null,
      "source": "parsed",
      "sourceUrl": "https://www.rfc-editor.org/info/rfc7029/",
      "updated": "2026-10-13T18:24:33.070Z",
      "version": "extractDocs.js@commit:6d30695438dd"
    },
    "authors": [
      {
        "name": "Sam Hartman"
      },
      {
        "name": "Margaret Cullen"
      },
      {
        "name": "Dacheng Zhang"
      }
    ],
    "authors$meta": {
      "confidence": "high",
      "note": "Parsed from Datatracker doc page article:author (profile full names)",
      "originalValue": null,
      "source": "parsed",
      "sourceUrl": "https://www.rfc-editor.org/info/rfc7029/",
      "updated": "2026-10-13T18:24:33.070Z",
      "version": "extractDocs.js@commit:6d30695438dd"
    },
    "docId": "RFC7029",
    "docId$meta": {
      "confidence": "high",
      "note": "Derived from RFC number or Datatracker identifier",
      "originalValue": null,
      "source": "resolved",
      "sourceUrl": "https://www.rfc-editor.org/info/rfc7029/",
      "updated": "2026-10-13T18:24:33.070Z",
      "version": "extractDocs.js@commit:6d30695438dd"
    },
    "docLabel": "IETF RFC 7029",
    "docLabel$meta": {
      "confidence": "high",
      "note": "Constructed from provider and document identifier",
      "originalValue": null,
      "source": "resolved",
      "sourceUrl": "https://www.rfc-editor.org/info/rfc7029/",
      "updated": "2026-10-13T18:24:33.070Z",
      "version": "extractDocs.js@commit:6d30695438dd"
    },
    "docNumber": "7029",
    "docNumber$meta": {
      "confidence": "high",
      "note": "Parsed from RFC info page report metadata",
      "originalValue": null,
      "source": "parsed",
      "sourceUrl": "https://www.rfc-editor.org/info/rfc7029/",
      "updated": "2026-10-13T18:24:33.070Z",
      "version": "extractDocs.js@commit:6d30695438dd"
    },
    "docTitle": "Extensible Authentication Protocol (EAP) Mutual Cryptographic Binding",
    "docTitle$meta": {
      "confidence": "high",
      "note": "Parsed from RFC index XML title",
      "originalValue": null,
      "source": "parsed",
      "sourceUrl": "https://www.rfc-editor.org/info/rfc7029/",
      "updated": "2026-10-13T18:24:33.070Z",
      "version": "extractDocs.js@commit:6d30695438dd"
    },
    "docType": "Informational",
    "docType$meta": {
      "confidence": "high",
      "note": "Mapped from Datatracker std_level or RFC status text",
      "originalValue": null,
      "source": "parsed",
      "sourceUrl": "https://www.rfc-editor.org/info/rfc7029/",
      "updated": "2026-10-13T18:24:33.070Z",
      "version": "extractDocs.js@commit:6d30695438dd"
    },
    "doi": "10.17487/RFC7029",
    "doi$meta": {
      "confidence": "high",
      "note": "Parsed from RFC index XML doi",
      "originalValue": null,
      "source": "resolved",
      "sourceUrl": "https://www.rfc-editor.org/info/rfc7029/",
      "updated": "2026-10-13T18:24:33.070Z",
      "version": "extractDocs.js@commit:6d30695438dd"
    },
    "href": "https://doi.org/10.17487/RFC7029",
    "href$meta": {
      "confidence": "high",
      "note": "Derived from DOI (https://doi.org/<doi>)",
      "originalValue": null,
      "source": "resolved",
      "sourceUrl": "https://www.rfc-editor.org/info/rfc7029/",
      "updated": "2026-10-13T18:24:33.070Z",
      "version": "extractDocs.js@commit:6d30695438dd"
    },
    "keywords": [
      "MITM",
      "EMSK Crypto Binding",
      "EMSK",
      "Tunnel"
    ],
    "keywords$meta": {
      "confidence": "high",
      "note": "Parsed from RFC index XML keywords",
      "originalValue": [
        "MITM",
        "Man-in-the-middle",
        "EMSK Crypto Binding",
        "Extended Master Session Key",
        "Tunnel"
      ],
      "overridden": true,
      "source": "parsed",
      "sourceUrl": "https://www.rfc-editor.org/info/rfc7029/",
      "updated": "2026-10-13T19:03:45.976Z",
      "version": "extractDocs.js@commit:8ad844f404e0"
    },
    "pages": "19",
    "pages$meta": {
      "confidence": "high",
      "note": "Parsed from RFC index XML page-count",
      "originalValue": null,
      "source": "parsed",
      "sourceUrl": "https://www.rfc-editor.org/info/rfc7029/",
      "updated": "2026-10-13T18:24:33.070Z",
      "version": "extractDocs.js@commit:6d30695438dd"
    },
    "publicationDate": "2013-10-01",
    "publicationDate$meta": {
      "confidence": "high",
      "note": "Parsed from RFC index XML date",
      "originalValue": null,
      "source": "parsed",
      "sourceUrl": "https://www.rfc-editor.org/info/rfc7029/",
      "updated": "2026-10-13T18:24:33.070Z",
      "version": "extractDocs.js@commit:6d30695438dd"
    },
    "publisher": "IETF",
    "publisher$meta": {
      "confidence": "high",
      "note": "Static: provider",
      "originalValue": null,
      "source": "parsed",
      "sourceUrl": "https://www.rfc-editor.org/info/rfc7029/",
      "updated": "2026-10-13T18:24:33.070Z",
      "version": "extractDocs.js@commit:6d30695438dd"
    },
    "references": {
      "bibliographic": [
        "RFC2759",
        "RFC4510",
        "RFC4851",
        "RFC5281",
        "RFC6677",
        "RFC6678",
        "orphan/RFC7029/h:8843b687",
        "orphan/RFC7029/h:5d52376d",
        "orphan/RFC7029/h:fc8d6e6e",
        "orphan/RFC7029/h:739708cd"
      ],
      "bibliographic$meta": {
        "confidence": "medium",
        "flag": "MIXED_REF_LAYOUT_RISK anchored=12 proseBlocks=16 skippedAnchorBlocks=13",
        "note": "Parsed from RFC HTML references/informative sections",
        "originalValue": [],
        "reviewRequired": true,
        "source": "parsed",
        "sourceUrl": "https://www.rfc-editor.org/info/rfc7029/",
        "updated": "2026-10-13T18:24:33.070Z",
        "version": "extractDocs.js@commit:6d30695438dd"
      },
      "normative": [
        "RFC2119",
        "RFC3748"
      ],
      "normative$meta": {
        "confidence": "high",
        "note": "Parsed from RFC HTML normative references sections",
        "originalValue": [],
        "source": "parsed",
        "sourceUrl": "https://www.rfc-editor.org/info/rfc7029/",
        "updated": "2026-10-13T18:24:33.070Z",
        "version": "extractDocs.js@commit:6d30695438dd"
      }
    },
    "resolvedHref": "https://www.rfc-editor.org/info/rfc7029/",
    "resolvedHref$meta": {
      "confidence": "high",
      "note": "Final URL resolved via URL redirect verification",
      "originalValue": null,
      "source": "resolved",
      "sourceUrl": "https://www.rfc-editor.org/info/rfc7029/",
      "updated": "2026-10-13T18:24:33.070Z",
      "version": "extractDocs.js@commit:6d30695438dd"
    },
    "status": {
      "active": true,
      "active$meta": {
        "confidence": "high",
        "note": "Derived from supersession relationship fields",
        "originalValue": null,
        "source": "resolved",
        "sourceUrl": "https://www.rfc-editor.org/info/rfc7029/",
        "updated": "2026-10-13T18:24:33.070Z",
        "version": "extractDocs.js@commit:6d30695438dd"
      },
      "errataExist": false,
      "errataExist$meta": {
        "confidence": "high",
        "note": "Derived from presence of errata links on RFC/Datatracker pages",
        "originalValue": null,
        "source": "parsed",
        "sourceUrl": "https://www.rfc-editor.org/info/rfc7029/",
        "updated": "2026-10-13T18:24:33.070Z",
        "version": "extractDocs.js@commit:6d30695438dd"
      },
      "latestVersion": true,
      "latestVersion$meta": {
        "confidence": "high",
        "note": "Derived from supersession relationship fields",
        "originalValue": null,
        "source": "resolved",
        "sourceUrl": "https://www.rfc-editor.org/info/rfc7029/",
        "updated": "2026-10-13T18:24:33.070Z",
        "version": "extractDocs.js@commit:6d30695438dd"
      },
      "statusNote": "Informational",
      "statusNote$meta": {
        "confidence": "high",
        "note": "Mapped from Datatracker doc.json std_level",
        "originalValue": null,
        "source": "parsed",
        "sourceUrl": "https://www.rfc-editor.org/info/rfc7029/",
        "updated": "2026-10-13T18:24:33.070Z",
        "version": "extractDocs.js@commit:6d30695438dd"
      },
      "superseded": false,
      "superseded$meta": {
        "confidence": "high",
        "note": "Derived from supersession relationship fields",
        "originalValue": null,
        "source": "resolved",
        "sourceUrl": "https://www.rfc-editor.org/info/rfc7029/",
        "updated": "2026-10-13T18:24:33.070Z",
        "version": "extractDocs.js@commit:6d30695438dd"
      }
    }
  }
}