Transport Layer Security (TLS) Session Resumption without Server-Side State

Metadata

Publisher: IETF
Doc Type: Standard
Pages: 17
Abstract: This document describes a mechanism that enables the Transport Layer Security (TLS) server to resume sessions and avoid keeping \%per-client session state. The TLS server encapsulates the session state into a ticket and forwards it to the client. The client can subsequently resume a session using the obtained ticket. [STANDARDS-TRACK]
Publication Date: 2006-05-01
Status Note: Proposed Standard
DOI: 10.17487/RFC4507
Link: https://doi.org/10.17487/RFC4507
Author(s): Joseph A. Salowey
Hao Zhou
Pasi Eronen
Hannes Tschofenig

Latest version of IETF RFC 4507

Document Versions — IETF RFC 4507

▶ IETF RFC 4507 (2006-05-01)

THIS DOC [SUPERSEDED] [LATEST VERSION]

Superseded by:

IETF RFC 5077 [Superseded*]

Normative Reference(s)

IETF RFC 2119 [Active*]
IETF RFC 2246 [Superseded*]
IETF RFC 4346 [Superseded*]
IETF RFC 4366 [Superseded*]

Bibliographic Reference(s)

NIST FIPS 180-2 [Withdrawn]
NIST FIPS 197 [Superseded]
Cam-Winget, N., McGrew, D., Salowey, J., and H. Zhou, "EAP Flexible Authentication via Secure Tunneling (EAP- FAST)", Work in Progress, April 2005. EXTERNAL
Pfitzmann, A. and M. Hansen, "Anonymity, Unlinkability, Unobservability, Pseudonymity, and Identity Management - A Consolidated Proposal for Terminology", http://dud.inf.tu-dresden.de/literatur/ Anon_Terminology_v0.26-1.pdf , Draft 0.26, December 2005. EXTERNAL
Shacham, H., Boneh, D., and E. Rescorla, "Client-side caching for TLS", Transactions on Information and System Security (TISSEC) , Volume 7, Issue 4, November 2004. EXTERNAL
Aura, T. and P. Nikander, "Stateless Connections", Proceedings of the First International Conference on Information and Communication Security (ICICS '97), 1997. EXTERNAL
National Institute of Standards and Technology, "Recommendation for Block Cipher Modes of Operation - Methods and Techniques", NIST Special Publication 800- 38A, December 2001. EXTERNAL
IETF RFC 2104 [Active, Amended*]
IETF RFC 2712 [Active*]
IETF RFC 4086 [Active*]
IETF RFC 4120 [Active*]
IETF RFC 4279 [Active*]

Source Data (JSON)

Full registry record with provenance metadata. Open directly: /api/doc/RFC4507.json

Reference Tree

Explore all references and references to this document, as a navigable tree.

Open Reference Tree

Reference this Doc

Plain text (ISO 690 compliant)

Preview:

IETF RFC 4507, Transport Layer Security (TLS) Session Resumption without Server-Side State. Available at https://doi.org/10.17487/RFC4507

Snippet:

IETF RFC 4507, Transport Layer Security (TLS) Session Resumption without Server-Side State. Available at https://doi.org/10.17487/RFC4507

HTML (ISO 690 compliant)

Preview:

IETF RFC 4507, Transport Layer Security (TLS) Session Resumption without Server-Side State. Available at https://doi.org/10.17487/RFC4507

Snippet:

<span class="citation"><cite>IETF RFC 4507</cite>, Transport Layer Security (TLS) Session Resumption without Server-Side State. Available at <a href="https://doi.org/10.17487/RFC4507" target="_blank" rel="noopener">https://doi.org/10.17487/RFC4507</a></span>

SMPTE's HTML Pub

Preview:

IETF RFC 4507, Transport Layer Security (TLS) Session Resumption without Server-Side State
doi: 10.17487/RFC4507
url: https://doi.org/10.17487/RFC4507

Snippet:

<li>
<cite id="bib-rfc4507">IETF RFC 4507</cite>, Transport Layer Security (TLS) Session Resumption without Server-Side State
<span class="doi">10.17487/RFC4507</span>
</li>

Referenced By

IETF RFC 4601 [Superseded*]
IETF RFC 4851 [Active*]
IETF RFC 5077 [Superseded*]
IETF RFC 8996 [Active*]