{
  "$schema": "/api/schemas/documents.schema.json",
  "apiVersion": "1.1.0",
  "lastModified": "2026-10-15T19:19:38.137Z",
  "sourcePath": "src/main/data/docs",
  "docId": "RFC8636",
  "document": {
    "abstract": "This document updates the Public Key Cryptography for Initial Authentication in Kerberos (PKINIT) standard (RFC 4556) to remove protocol structures tied to specific cryptographic algorithms. The PKINIT key derivation function is made negotiable, and the digest algorithms for signing the pre-authentication data and the client's X.509 certificates are made discoverable. These changes provide preemptive protection against vulnerabilities discovered in the future in any specific cryptographic algorithm and allow incremental deployment of newer algorithms.",
    "abstract$meta": {
      "confidence": "high",
      "note": "Parsed from RFC index XML abstract",
      "originalValue": null,
      "source": "parsed",
      "sourceUrl": "https://www.rfc-editor.org/info/rfc8636/",
      "updated": "2026-10-15T19:19:38.137Z",
      "version": "extractDocs.js@commit:669b9e3c6fef"
    },
    "authors": [
      {
        "name": "Love Astrand"
      },
      {
        "name": "Larry Zhu"
      },
      {
        "name": "Margaret Cullen"
      },
      {
        "name": "Greg Hudson"
      }
    ],
    "authors$meta": {
      "confidence": "high",
      "note": "Parsed from Datatracker doc page article:author (profile full names)",
      "originalValue": null,
      "source": "parsed",
      "sourceUrl": "https://www.rfc-editor.org/info/rfc8636/",
      "updated": "2026-10-15T19:19:38.137Z",
      "version": "extractDocs.js@commit:669b9e3c6fef"
    },
    "docId": "RFC8636",
    "docId$meta": {
      "confidence": "high",
      "note": "Derived from RFC number or Datatracker identifier",
      "originalValue": null,
      "source": "resolved",
      "sourceUrl": "https://www.rfc-editor.org/info/rfc8636/",
      "updated": "2026-10-15T19:19:38.137Z",
      "version": "extractDocs.js@commit:669b9e3c6fef"
    },
    "docLabel": "IETF RFC 8636",
    "docLabel$meta": {
      "confidence": "high",
      "note": "Constructed from provider and document identifier",
      "originalValue": null,
      "source": "resolved",
      "sourceUrl": "https://www.rfc-editor.org/info/rfc8636/",
      "updated": "2026-10-15T19:19:38.137Z",
      "version": "extractDocs.js@commit:669b9e3c6fef"
    },
    "docNumber": "8636",
    "docNumber$meta": {
      "confidence": "high",
      "note": "Parsed from RFC info page report metadata",
      "originalValue": null,
      "source": "parsed",
      "sourceUrl": "https://www.rfc-editor.org/info/rfc8636/",
      "updated": "2026-10-15T19:19:38.137Z",
      "version": "extractDocs.js@commit:669b9e3c6fef"
    },
    "docTitle": "Public Key Cryptography for Initial Authentication in Kerberos (PKINIT) Algorithm Agility",
    "docTitle$meta": {
      "confidence": "high",
      "note": "Parsed from RFC index XML title",
      "originalValue": null,
      "source": "parsed",
      "sourceUrl": "https://www.rfc-editor.org/info/rfc8636/",
      "updated": "2026-10-15T19:19:38.137Z",
      "version": "extractDocs.js@commit:669b9e3c6fef"
    },
    "docType": "Standard",
    "docType$meta": {
      "confidence": "high",
      "note": "Mapped from Datatracker std_level or RFC status text",
      "originalValue": null,
      "source": "parsed",
      "sourceUrl": "https://www.rfc-editor.org/info/rfc8636/",
      "updated": "2026-10-15T19:19:38.137Z",
      "version": "extractDocs.js@commit:669b9e3c6fef"
    },
    "doi": "10.17487/RFC8636",
    "doi$meta": {
      "confidence": "high",
      "note": "Parsed from RFC index XML doi",
      "originalValue": null,
      "source": "resolved",
      "sourceUrl": "https://www.rfc-editor.org/info/rfc8636/",
      "updated": "2026-10-15T19:19:38.137Z",
      "version": "extractDocs.js@commit:669b9e3c6fef"
    },
    "href": "https://doi.org/10.17487/RFC8636",
    "href$meta": {
      "confidence": "high",
      "note": "Derived from DOI (https://doi.org/<doi>)",
      "originalValue": null,
      "source": "resolved",
      "sourceUrl": "https://www.rfc-editor.org/info/rfc8636/",
      "updated": "2026-10-15T19:19:38.137Z",
      "version": "extractDocs.js@commit:669b9e3c6fef"
    },
    "pages": "21",
    "pages$meta": {
      "confidence": "high",
      "note": "Parsed from RFC index XML page-count",
      "originalValue": null,
      "source": "parsed",
      "sourceUrl": "https://www.rfc-editor.org/info/rfc8636/",
      "updated": "2026-10-15T19:19:38.137Z",
      "version": "extractDocs.js@commit:669b9e3c6fef"
    },
    "publicationDate": "2019-07-01",
    "publicationDate$meta": {
      "confidence": "high",
      "note": "Parsed from RFC index XML date",
      "originalValue": null,
      "source": "parsed",
      "sourceUrl": "https://www.rfc-editor.org/info/rfc8636/",
      "updated": "2026-10-15T19:19:38.137Z",
      "version": "extractDocs.js@commit:669b9e3c6fef"
    },
    "publisher": "IETF",
    "publisher$meta": {
      "confidence": "high",
      "note": "Static: provider",
      "originalValue": null,
      "source": "parsed",
      "sourceUrl": "https://www.rfc-editor.org/info/rfc8636/",
      "updated": "2026-10-15T19:19:38.137Z",
      "version": "extractDocs.js@commit:669b9e3c6fef"
    },
    "references": {
      "bibliographic": [
        "RFC1321",
        "RFC6150",
        "RFC6194",
        "RFC7696",
        "RFC8062",
        "RFC8070",
        "10.1007-11426639_1"
      ],
      "bibliographic$meta": {
        "confidence": "medium",
        "flag": "MIXED_REF_LAYOUT_RISK anchored=19 proseBlocks=25 skippedAnchorBlocks=22",
        "note": "Parsed from RFC HTML references/informative sections",
        "originalValue": [],
        "reviewRequired": true,
        "source": "parsed",
        "sourceUrl": "https://www.rfc-editor.org/info/rfc8636/",
        "updated": "2026-10-15T19:19:38.137Z",
        "version": "extractDocs.js@commit:669b9e3c6fef"
      },
      "normative": [
        "RFC2119",
        "RFC3961",
        "RFC4120",
        "RFC4556",
        "RFC5280",
        "RFC5652",
        "RFC6234",
        "RFC8174",
        "NIST.SP.800-56A",
        "NIST.SP.800-56C",
        "T-REC-X.680.2015",
        "T-REC-X.690.2015"
      ],
      "normative$meta": {
        "confidence": "high",
        "note": "Parsed from RFC HTML normative references sections",
        "originalValue": [],
        "source": "parsed",
        "sourceUrl": "https://www.rfc-editor.org/info/rfc8636/",
        "updated": "2026-10-15T19:19:38.137Z",
        "version": "extractDocs.js@commit:669b9e3c6fef"
      }
    },
    "resolvedHref": "https://www.rfc-editor.org/info/rfc8636/",
    "resolvedHref$meta": {
      "confidence": "high",
      "note": "Final URL resolved via URL redirect verification",
      "originalValue": null,
      "source": "resolved",
      "sourceUrl": "https://www.rfc-editor.org/info/rfc8636/",
      "updated": "2026-10-15T19:19:38.137Z",
      "version": "extractDocs.js@commit:669b9e3c6fef"
    },
    "status": {
      "active": true,
      "active$meta": {
        "confidence": "high",
        "note": "Derived from supersession relationship fields",
        "originalValue": null,
        "source": "resolved",
        "sourceUrl": "https://www.rfc-editor.org/info/rfc8636/",
        "updated": "2026-10-15T19:19:38.137Z",
        "version": "extractDocs.js@commit:669b9e3c6fef"
      },
      "amends": [
        "RFC4556"
      ],
      "amends$meta": {
        "confidence": "high",
        "note": "Parsed from RFC index XML",
        "originalValue": [],
        "source": "parsed",
        "sourceUrl": "https://www.rfc-editor.org/info/rfc8636/",
        "updated": "2026-10-15T19:19:38.137Z",
        "version": "extractDocs.js@commit:669b9e3c6fef"
      },
      "errataExist": true,
      "errataExist$meta": {
        "confidence": "high",
        "note": "Derived from presence of errata links on RFC/Datatracker pages",
        "originalValue": null,
        "source": "parsed",
        "sourceUrl": "https://www.rfc-editor.org/info/rfc8636/",
        "updated": "2026-10-15T19:19:38.137Z",
        "version": "extractDocs.js@commit:669b9e3c6fef"
      },
      "errataUrl": [
        "https://www.rfc-editor.org/errata/rfc8636",
        "https://www.rfc-editor.org/errata_search.php?rfc=8636",
        "https://www.rfc-editor.org/rfc/inline-errata/rfc8636.html"
      ],
      "errataUrl$meta": {
        "confidence": "high",
        "note": "Parsed from errata links on RFC/Datatracker pages",
        "originalValue": [],
        "source": "parsed",
        "sourceUrl": "https://www.rfc-editor.org/info/rfc8636/",
        "updated": "2026-10-15T19:19:38.137Z",
        "version": "extractDocs.js@commit:669b9e3c6fef"
      },
      "latestVersion": true,
      "latestVersion$meta": {
        "confidence": "high",
        "note": "Derived from supersession relationship fields",
        "originalValue": null,
        "source": "resolved",
        "sourceUrl": "https://www.rfc-editor.org/info/rfc8636/",
        "updated": "2026-10-15T19:19:38.137Z",
        "version": "extractDocs.js@commit:669b9e3c6fef"
      },
      "statusNote": "Proposed Standard",
      "statusNote$meta": {
        "confidence": "high",
        "note": "Mapped from Datatracker doc.json std_level",
        "originalValue": null,
        "source": "parsed",
        "sourceUrl": "https://www.rfc-editor.org/info/rfc8636/",
        "updated": "2026-10-15T19:19:38.137Z",
        "version": "extractDocs.js@commit:669b9e3c6fef"
      },
      "superseded": false,
      "superseded$meta": {
        "confidence": "high",
        "note": "Derived from supersession relationship fields",
        "originalValue": null,
        "source": "resolved",
        "sourceUrl": "https://www.rfc-editor.org/info/rfc8636/",
        "updated": "2026-10-15T19:19:38.137Z",
        "version": "extractDocs.js@commit:669b9e3c6fef"
      }
    }
  }
}