Problem and Applicability Statement for Better-Than-Nothing Security (BTNS)
Metadata
- Publisher
- IETF
- Doc Type
- Informational
- Pages
- 28
- Abstract
- The Internet network security protocol suite, IPsec, requires authentication, usually of network-layer entities, to enable access control and provide security services. This authentication can be based on mechanisms such as pre-shared symmetric keys, certificates with associated asymmetric keys, or the use of Kerberos (via Kerberized Internet Negotiation of Keys (KINK)). The need to deploy authentication information and its associated identities can be a significant obstacle to the use of IPsec. This document explains the rationale for extending the Internet network security protocol suite to enable use of IPsec security services without authentication. These extensions are intended to protect communication, providing "better-than-nothing security" (BTNS). The extensions may be used on their own (this use is called Stand-Alone BTNS, or SAB) or may be used to provide network-layer security that can be authenticated by higher layers in the protocol stack (this use is called Channel-Bound BTNS, or CBB). The document also explains situations for which use of SAB and/or CBB extensions are applicable. This memo provides information for the Internet community.
- Publication Date
- 2008-11-01
- Status Note
- Informational
- DOI
10.17487/RFC5387- Link
- https://doi.org/10.17487/RFC5387
- Author(s)
- Dr. Joseph D. TouchDavid L. BlackYu-Shun Wang
- Keyword(s)
- IPSEC
Latest version of IETF RFC 5387
Document Versions — IETF RFC 5387
-
▶ IETF RFC 5387 (2008-11-01)THIS DOC [ACTIVE] [LATEST VERSION]
Bibliographic Reference(s)
- CERT Vulnerability Note VU#415294, "The Border Gateway Protocol relies on persistent TCP sessions without specifying authentication requirements", 4/20/2004. EXTERNAL
- TCP SYN-cookies, http://cr.yp.to/syncookies.html EXTERNAL
- Touch, J., A. Mankin, R. Bonica, "The TCP Authentication Option", Work in Progress, November 2007. EXTERNAL
- Williams, N., "IPsec Channels: Connection Latching" , Work in Progress, April 2008. EXTERNAL
- Ramaiah, A., R Stewart, M. Dalal, "Improving TCP's Robustness to Blind In-Window Attacks", Work in Progress, January 2008. EXTERNAL
- IETF RFC 2385 [Superseded*]
- IETF RFC 2409 [Superseded*]
- IETF RFC 2743 [Active*]
- IETF RFC 3530 [Superseded*]
- IETF RFC 3720 [Superseded*]
- IETF RFC 3723 [Active*]
- IETF RFC 3748 [Active*]
- IETF RFC 4120 [Active*]
- IETF RFC 4251 [Active*]
- IETF RFC 4272 [Active*]
- IETF RFC 4301 [Active, Amended*]
- IETF RFC 4306 [Superseded*]
- IETF RFC 4322 [Active*]
- IETF RFC 4422 [Active*]
- IETF RFC 4430 [Active*]
- IETF RFC 4945 [Active*]
- IETF RFC 4953 [Active*]
- IETF RFC 4960 [Superseded*]
- IETF RFC 5040 [Active*]
- IETF RFC 5041 [Active*]
- IETF RFC 5056 [Active*]
- IETF RFC 5201 [Superseded*]
- IETF RFC 5246 [Superseded*]
- IETF RFC 5386 [Active*]
Source Data (JSON)
Full registry record with provenance metadata. Open directly: /api/doc/RFC5387.json
Reference Tree
Explore all references and references to this document, as a navigable tree.
Open Reference TreeReference this Doc
Plain text (ISO 690 compliant)
Preview:
IETF RFC 5387, Problem and Applicability Statement for Better-Than-Nothing Security (BTNS). Available at https://doi.org/10.17487/RFC5387
Snippet:
IETF RFC 5387, Problem and Applicability Statement for Better-Than-Nothing Security (BTNS). Available at https://doi.org/10.17487/RFC5387
HTML (ISO 690 compliant)
Preview:
IETF RFC 5387, Problem and Applicability Statement for Better-Than-Nothing Security (BTNS). Available at https://doi.org/10.17487/RFC5387
Snippet:
<span class="citation"><cite>IETF RFC 5387</cite>, Problem and Applicability Statement for Better-Than-Nothing Security (BTNS). Available at <a href="https://doi.org/10.17487/RFC5387" target="_blank" rel="noopener">https://doi.org/10.17487/RFC5387</a></span>
SMPTE's HTML Pub
Preview:
IETF RFC 5387, Problem and Applicability Statement for Better-Than-Nothing Security (BTNS)
doi: 10.17487/RFC5387
url: https://doi.org/10.17487/RFC5387
doi: 10.17487/RFC5387
url: https://doi.org/10.17487/RFC5387
Snippet:
<li> <cite id="bib-rfc5387">IETF RFC 5387</cite>, Problem and Applicability Statement for Better-Than-Nothing Security (BTNS) <span class="doi">10.17487/RFC5387</span> </li>
Referenced By
- IETF RFC 5386 [Active*]
- IETF RFC 5660 [Active*]
- IETF RFC 6071 [Active*]
- IETF RFC 7146 [Active*]