Transport Layer Security (TLS) Renegotiation Indication Extension
Metadata
- Publisher
- IETF
- Doc Type
- Standard
- Pages
- 15
- Abstract
- Secure Socket Layer (SSL) and Transport Layer Security (TLS) renegotiation are vulnerable to an attack in which the attacker forms a TLS connection with the target server, injects content of his choice, and then splices in a new TLS connection from a client. The server treats the client's initial TLS handshake as a renegotiation and thus believes that the initial data transmitted by the attacker is from the same entity as the subsequent client data. This specification defines a TLS extension to cryptographically tie renegotiations to the TLS connections they are being performed over, thus preventing this attack. [STANDARDS-TRACK]
- Publication Date
- 2010-02-01
- Status Note
- Proposed Standard
- DOI
10.17487/RFC5746- Link
- https://doi.org/10.17487/RFC5746
- Author(s)
- Eric RescorlaMarsh RaySteve DispensaOne Way
- Keyword(s)
- SSL
Latest version of IETF RFC 5746
Document Versions — IETF RFC 5746
-
▶ IETF RFC 5746 (2010-02-01)THIS DOC [ACTIVE] [LATEST VERSION]
Normative Reference(s)
- IETF RFC 2119 [Active*]
- IETF RFC 5246 [Superseded*]
Bibliographic Reference(s)
- Ray, M., "Authentication Gap in TLS Renegotiation", November 2009, < http://extendedsubset.com/?p=8 >. EXTERNAL
- Altman, J., Williams, N., and L. Zhu, "Channel Bindings for TLS", Work in Progress, October 2009. EXTERNAL
- Freier, A., Karlton, P., and P. Kocher, "The SSL Protocol Version 3.0", Work in Progress, November 1996. EXTERNAL
- IETF RFC 2818 [Superseded*]
- IETF RFC 2965 [Superseded*]
- IETF RFC 4347 [Superseded*]
- RFC5056 — RFC5056 EXTERNAL
Source Data (JSON)
Full registry record with provenance metadata. Open directly: /api/doc/RFC5746.json
Reference Tree
Explore all references and references to this document, as a navigable tree.
Open Reference TreeReference this Doc
Plain text (ISO 690 compliant)
Preview:
IETF RFC 5746, Transport Layer Security (TLS) Renegotiation Indication Extension. Available at https://doi.org/10.17487/RFC5746
Snippet:
IETF RFC 5746, Transport Layer Security (TLS) Renegotiation Indication Extension. Available at https://doi.org/10.17487/RFC5746
HTML (ISO 690 compliant)
Preview:
IETF RFC 5746, Transport Layer Security (TLS) Renegotiation Indication Extension. Available at https://doi.org/10.17487/RFC5746
Snippet:
<span class="citation"><cite>IETF RFC 5746</cite>, Transport Layer Security (TLS) Renegotiation Indication Extension. Available at <a href="https://doi.org/10.17487/RFC5746" target="_blank" rel="noopener">https://doi.org/10.17487/RFC5746</a></span>
SMPTE's HTML Pub
Preview:
IETF RFC 5746, Transport Layer Security (TLS) Renegotiation Indication Extension
doi: 10.17487/RFC5746
url: https://doi.org/10.17487/RFC5746
doi: 10.17487/RFC5746
url: https://doi.org/10.17487/RFC5746
Snippet:
<li> <cite id="bib-rfc5746">IETF RFC 5746</cite>, Transport Layer Security (TLS) Renegotiation Indication Extension <span class="doi">10.17487/RFC5746</span> </li>
Referenced By
- IETF RFC 5929 [Active*]
- IETF RFC 6012 [Active*]
- IETF RFC 6084 [Active*]
- IETF RFC 6120 [Active*]
- IETF RFC 6881 [Active*]
- IETF RFC 7030 [Active*]
- IETF RFC 7170 [Superseded*]
- IETF RFC 7457 [Active*]
- IETF RFC 7525 [Superseded*]
- IETF RFC 7562 [Active*]
- IETF RFC 7568 [Active*]
- IETF RFC 7627 [Superseded*]
- IETF RFC 7925 [Active*]