{
  "$schema": "/api/schemas/documents.schema.json",
  "apiVersion": "1.1.0",
  "lastModified": "2026-10-20T21:47:31.860Z",
  "sourcePath": "src/main/data/docs",
  "docId": "RFC9257",
  "document": {
    "abstract": "This document provides usage guidance for external Pre-Shared Keys (PSKs) in Transport Layer Security (TLS) 1.3 as defined in RFC 8446. It lists TLS security properties provided by PSKs under certain assumptions, then it demonstrates how violations of these assumptions lead to attacks. Advice for applications to help meet these assumptions is provided. This document also discusses PSK use cases and provisioning processes. Finally, it lists the privacy and security properties that are not provided by TLS 1.3 when external PSKs are used.",
    "abstract$meta": {
      "confidence": "high",
      "note": "Parsed from RFC index XML abstract",
      "originalValue": null,
      "source": "parsed",
      "sourceUrl": "https://www.rfc-editor.org/info/rfc9257/",
      "updated": "2026-10-20T21:47:31.860Z",
      "version": "extractDocs.js@commit:92f3ced618ff"
    },
    "authors": [
      {
        "name": "Russ Housley"
      },
      {
        "name": "Jonathan Hoyland"
      },
      {
        "name": "Mohit Sethi"
      },
      {
        "name": "Christopher A. Wood"
      }
    ],
    "authors$meta": {
      "confidence": "high",
      "note": "Parsed from Datatracker doc page article:author (profile full names)",
      "originalValue": null,
      "source": "parsed",
      "sourceUrl": "https://www.rfc-editor.org/info/rfc9257/",
      "updated": "2026-10-20T21:47:31.860Z",
      "version": "extractDocs.js@commit:92f3ced618ff"
    },
    "docId": "RFC9257",
    "docId$meta": {
      "confidence": "high",
      "note": "Derived from RFC number or Datatracker identifier",
      "originalValue": null,
      "source": "resolved",
      "sourceUrl": "https://www.rfc-editor.org/info/rfc9257/",
      "updated": "2026-10-20T21:47:31.860Z",
      "version": "extractDocs.js@commit:92f3ced618ff"
    },
    "docLabel": "IETF RFC 9257",
    "docLabel$meta": {
      "confidence": "high",
      "note": "Constructed from provider and document identifier",
      "originalValue": null,
      "source": "resolved",
      "sourceUrl": "https://www.rfc-editor.org/info/rfc9257/",
      "updated": "2026-10-20T21:47:31.860Z",
      "version": "extractDocs.js@commit:92f3ced618ff"
    },
    "docNumber": "9257",
    "docNumber$meta": {
      "confidence": "high",
      "note": "From the RFC index entry (rfc-index.xml <doc-id>)",
      "originalValue": null,
      "source": "parsed",
      "sourceUrl": "https://www.rfc-editor.org/info/rfc9257/",
      "updated": "2026-10-20T21:47:31.860Z",
      "version": "extractDocs.js@commit:92f3ced618ff"
    },
    "docTitle": "Guidance for External Pre-Shared Key (PSK) Usage in TLS",
    "docTitle$meta": {
      "confidence": "high",
      "note": "Parsed from RFC index XML title",
      "originalValue": null,
      "source": "parsed",
      "sourceUrl": "https://www.rfc-editor.org/info/rfc9257/",
      "updated": "2026-10-20T21:47:31.860Z",
      "version": "extractDocs.js@commit:92f3ced618ff"
    },
    "docType": "Informational",
    "docType$meta": {
      "confidence": "high",
      "note": "Mapped from Datatracker std_level or RFC status text",
      "originalValue": null,
      "source": "parsed",
      "sourceUrl": "https://www.rfc-editor.org/info/rfc9257/",
      "updated": "2026-10-20T21:47:31.860Z",
      "version": "extractDocs.js@commit:92f3ced618ff"
    },
    "doi": "10.17487/RFC9257",
    "doi$meta": {
      "confidence": "high",
      "note": "Parsed from RFC index XML doi",
      "originalValue": null,
      "source": "resolved",
      "sourceUrl": "https://www.rfc-editor.org/info/rfc9257/",
      "updated": "2026-10-20T21:47:31.860Z",
      "version": "extractDocs.js@commit:92f3ced618ff"
    },
    "href": "https://doi.org/10.17487/RFC9257",
    "href$meta": {
      "confidence": "high",
      "note": "Derived from DOI (https://doi.org/<doi>)",
      "originalValue": null,
      "source": "resolved",
      "sourceUrl": "https://www.rfc-editor.org/info/rfc9257/",
      "updated": "2026-10-20T21:47:31.860Z",
      "version": "extractDocs.js@commit:92f3ced618ff"
    },
    "pages": "13",
    "pages$meta": {
      "confidence": "high",
      "note": "Parsed from RFC index XML page-count",
      "originalValue": null,
      "source": "parsed",
      "sourceUrl": "https://www.rfc-editor.org/info/rfc9257/",
      "updated": "2026-10-20T21:47:31.860Z",
      "version": "extractDocs.js@commit:92f3ced618ff"
    },
    "publicationDate": "2022-07-01",
    "publicationDate$meta": {
      "confidence": "high",
      "note": "Parsed from RFC index XML date",
      "originalValue": null,
      "source": "parsed",
      "sourceUrl": "https://www.rfc-editor.org/info/rfc9257/",
      "updated": "2026-10-20T21:47:31.860Z",
      "version": "extractDocs.js@commit:92f3ced618ff"
    },
    "publisher": "IETF",
    "publisher$meta": {
      "confidence": "high",
      "note": "Static: provider",
      "originalValue": null,
      "source": "parsed",
      "sourceUrl": "https://www.rfc-editor.org/info/rfc9257/",
      "updated": "2026-10-20T21:47:31.860Z",
      "version": "extractDocs.js@commit:92f3ced618ff"
    },
    "references": {
      "bibliographic": [
        "IETF.draft-irtf-cfrg-cpace-06",
        "IETF.draft-ietf-tls-ctls-06",
        "IETF.draft-mattsson-emu-eap-tls-psk-00",
        "ETSI.TR-133-919.2014",
        "10.1007-978-3-540-45146-4_24",
        "OMA.TS-LightweightM2M.V1_0.20170208",
        "IETF.draft-irtf-cfrg-opaque-09",
        "RFC2865",
        "RFC3748",
        "RFC4122",
        "RFC4279",
        "RFC6066",
        "RFC6614",
        "RFC7925",
        "RFC8773",
        "RFC9147",
        "10.1007-s00145-021-09387-y",
        "10.1145-3321705.3329813",
        "orphan/RFC9257/h:fc58288e",
        "orphan/RFC9257/h:701f96b1"
      ],
      "bibliographic$meta": {
        "confidence": "high",
        "note": "Parsed from RFC HTML references/informative sections",
        "originalValue": [],
        "source": "parsed",
        "sourceUrl": "https://www.rfc-editor.org/info/rfc9257/",
        "updated": "2026-10-20T21:47:31.860Z",
        "version": "extractDocs.js@commit:92f3ced618ff"
      },
      "normative": [
        "RFC2119",
        "RFC8174",
        "RFC8446",
        "RFC9258"
      ],
      "normative$meta": {
        "confidence": "high",
        "note": "Parsed from RFC HTML normative references sections",
        "originalValue": [],
        "source": "parsed",
        "sourceUrl": "https://www.rfc-editor.org/info/rfc9257/",
        "updated": "2026-10-20T21:47:31.860Z",
        "version": "extractDocs.js@commit:92f3ced618ff"
      }
    },
    "resolvedHref": "https://www.rfc-editor.org/info/rfc9257/",
    "resolvedHref$meta": {
      "confidence": "high",
      "note": "Final URL resolved via URL redirect verification",
      "originalValue": null,
      "source": "resolved",
      "sourceUrl": "https://www.rfc-editor.org/info/rfc9257/",
      "updated": "2026-10-20T21:47:31.860Z",
      "version": "extractDocs.js@commit:92f3ced618ff"
    },
    "status": {
      "active": true,
      "active$meta": {
        "confidence": "high",
        "note": "Derived from supersession relationship fields",
        "originalValue": null,
        "source": "resolved",
        "sourceUrl": "https://www.rfc-editor.org/info/rfc9257/",
        "updated": "2026-10-20T21:47:31.860Z",
        "version": "extractDocs.js@commit:92f3ced618ff"
      },
      "errataExist": true,
      "errataExist$meta": {
        "confidence": "high",
        "note": "Derived from presence of errata links on RFC/Datatracker pages",
        "originalValue": null,
        "source": "parsed",
        "sourceUrl": "https://www.rfc-editor.org/info/rfc9257/",
        "updated": "2026-10-20T21:47:31.860Z",
        "version": "extractDocs.js@commit:92f3ced618ff"
      },
      "errataUrl": [
        "https://www.rfc-editor.org/errata/rfc9257",
        "https://www.rfc-editor.org/errata_search.php?rfc=9257",
        "https://www.rfc-editor.org/rfc/inline-errata/rfc9257.html"
      ],
      "errataUrl$meta": {
        "confidence": "high",
        "note": "Parsed from errata links on RFC/Datatracker pages",
        "originalValue": [],
        "source": "parsed",
        "sourceUrl": "https://www.rfc-editor.org/info/rfc9257/",
        "updated": "2026-10-20T21:47:31.860Z",
        "version": "extractDocs.js@commit:92f3ced618ff"
      },
      "latestVersion": true,
      "latestVersion$meta": {
        "confidence": "high",
        "note": "Derived from supersession relationship fields",
        "originalValue": null,
        "source": "resolved",
        "sourceUrl": "https://www.rfc-editor.org/info/rfc9257/",
        "updated": "2026-10-20T21:47:31.860Z",
        "version": "extractDocs.js@commit:92f3ced618ff"
      },
      "statusNote": "Informational",
      "statusNote$meta": {
        "confidence": "high",
        "note": "Mapped from Datatracker doc.json std_level",
        "originalValue": null,
        "source": "parsed",
        "sourceUrl": "https://www.rfc-editor.org/info/rfc9257/",
        "updated": "2026-10-20T21:47:31.860Z",
        "version": "extractDocs.js@commit:92f3ced618ff"
      },
      "superseded": false,
      "superseded$meta": {
        "confidence": "high",
        "note": "Derived from supersession relationship fields",
        "originalValue": null,
        "source": "resolved",
        "sourceUrl": "https://www.rfc-editor.org/info/rfc9257/",
        "updated": "2026-10-20T21:47:31.860Z",
        "version": "extractDocs.js@commit:92f3ced618ff"
      }
    }
  }
}