API Build-data JSON Resources
Theme

Choose how MSRBot.io looks on this device.

Auto (match system) Light mode Dark mode

Preference is stored in this browser only.

IETF RFC 5802
[ACTIVE]

Salted Challenge Response Authentication Mechanism (SCRAM) SASL and GSS-API Mechanisms

Metadata

Publisher
IETF
Doc Type
Standard
Pages
28
Abstract
The secure authentication mechanism most widely deployed and used by Internet application protocols is the transmission of clear-text passwords over a channel protected by Transport Layer Security (TLS). There are some significant security concerns with that mechanism, which could be addressed by the use of a challenge response authentication mechanism protected by TLS. Unfortunately, the challenge response mechanisms presently on the standards track all fail to meet requirements necessary for widespread deployment, and have had success only in limited use. This specification describes a family of Simple Authentication and Security Layer (SASL; RFC 4422) authentication mechanisms called the Salted Challenge Response Authentication Mechanism (SCRAM), which addresses the security concerns and meets the deployability requirements. When used in combination with TLS or an equivalent security layer, a mechanism from this family could improve the status quo for application protocol authentication and provide a suitable choice for a mandatory-to-implement mechanism for future application protocol standards. [STANDARDS-TRACK]
Publication Date
2010-07-01
Status Note
Proposed Standard
DOI
10.17487/RFC5802
Link
https://doi.org/10.17487/RFC5802
Author(s)
Chris Newman
Abhijit Menon-Sen
Alexey Melnikov
Nicolás Williams
Keyword(s)
SASL
Latest version of IETF RFC 5802

Document Versions — IETF RFC 5802

  • ▶ IETF RFC 5802 (2010-07-01)
    THIS DOC [ACTIVE] [LATEST VERSION]

Amended by:

Normative Reference(s)

Bibliographic Reference(s)

Source Data (JSON)

Full registry record with provenance metadata. Open directly: /api/doc/RFC5802.json

Reference Tree

Explore all references and references to this document, as a navigable tree.

Open Reference Tree
Reference this Doc

Plain text (ISO 690 compliant)

Preview:
IETF RFC 5802, Salted Challenge Response Authentication Mechanism (SCRAM) SASL and GSS-API Mechanisms. Available at https://doi.org/10.17487/RFC5802
Snippet:
IETF RFC 5802, Salted Challenge Response Authentication Mechanism (SCRAM) SASL and GSS-API Mechanisms. Available at https://doi.org/10.17487/RFC5802

HTML (ISO 690 compliant)

Preview:
IETF RFC 5802, Salted Challenge Response Authentication Mechanism (SCRAM) SASL and GSS-API Mechanisms. Available at https://doi.org/10.17487/RFC5802
Snippet:
<span class="citation"><cite>IETF RFC 5802</cite>, Salted Challenge Response Authentication Mechanism (SCRAM) SASL and GSS-API Mechanisms. Available at <a href="https://doi.org/10.17487/RFC5802" target="_blank" rel="noopener">https://doi.org/10.17487/RFC5802</a></span>

SMPTE Icon SMPTE's HTML Pub

Preview:
IETF RFC 5802, Salted Challenge Response Authentication Mechanism (SCRAM) SASL and GSS-API Mechanisms
doi: 10.17487/RFC5802
url: https://doi.org/10.17487/RFC5802
Snippet:
<li>
<cite id="bib-rfc5802">IETF RFC 5802</cite>, Salted Challenge Response Authentication Mechanism (SCRAM) SASL and GSS-API Mechanisms
<span class="doi">10.17487/RFC5802</span>
</li>

Referenced By