Transport Layer Security (TLS) Authorization Extensions

Metadata

Publisher: IETF
Doc Type: Experimental
Pages: 19
Abstract: This document specifies authorization extensions to the Transport Layer Security (TLS) Handshake Protocol. Extensions are carried in the client and server hello messages to confirm that both parties support the desired authorization data types. Then, if supported by both the client and the server, authorization information, such as attribute certificates (ACs) or Security Assertion Markup Language (SAML) assertions, is exchanged in the supplemental data handshake message. This document defines an Experimental Protocol for the Internet community.
Publication Date: 2010-05-01
Status Note: Experimental
DOI: 10.17487/RFC5878
Link: https://doi.org/10.17487/RFC5878
Author(s): Mark Brown
Russ Housley

Latest version of IETF RFC 5878

Document Versions — IETF RFC 5878

▶ IETF RFC 5878 (2010-05-01)

THIS DOC [ACTIVE] [LATEST VERSION]

Amended by:

IETF RFC 8447 [Active*]
IETF RFC 8996 [Active*]

Normative Reference(s)

NIST FIPS 180-3 [Withdrawn]
OASIS Security Services Technical Committee, "Bindings for the OASIS Security Assertion Markup Language (SAML) V2.0", March 2005. EXTERNAL
OASIS Security Services Technical Committee, "Security Assertion Markup Language (SAML) Version 2.0 Specification Set", March 2005. EXTERNAL
OASIS Security Services Technical Committee, "Security Assertion Markup Language (SAML) Version 1.1 Specification Set", September 2003. EXTERNAL
IETF RFC 2119 [Active*]
IETF RFC 2246 [Superseded*]
IETF RFC 2616 [Superseded*]
IETF RFC 2781 [Active*]
IETF RFC 2817 [Active*]
IETF RFC 3629 [Active*]
IETF RFC 4346 [Superseded*]
IETF RFC 4366 [Superseded*]
IETF RFC 4680 [Active*]
IETF RFC 5226 [Superseded*]
IETF RFC 5246 [Superseded*]
IETF RFC 5280 [Active, Amended*]
RFC5755 — ATTRCERT EXTERNAL
RFC5877 — ACTYPE EXTERNAL
W3C XML 1 [Active]

Bibliographic Reference(s)

IETF RFC 3546 [Superseded*]

Source Data (JSON)

Full registry record with provenance metadata. Open directly: /api/doc/RFC5878.json

Reference Tree

Explore all references and references to this document, as a navigable tree.

Open Reference Tree

Reference this Doc

Plain text (ISO 690 compliant)

Preview:

IETF RFC 5878, Transport Layer Security (TLS) Authorization Extensions. Available at https://doi.org/10.17487/RFC5878

Snippet:

IETF RFC 5878, Transport Layer Security (TLS) Authorization Extensions. Available at https://doi.org/10.17487/RFC5878

HTML (ISO 690 compliant)

Preview:

IETF RFC 5878, Transport Layer Security (TLS) Authorization Extensions. Available at https://doi.org/10.17487/RFC5878

Snippet:

<span class="citation"><cite>IETF RFC 5878</cite>, Transport Layer Security (TLS) Authorization Extensions. Available at <a href="https://doi.org/10.17487/RFC5878" target="_blank" rel="noopener">https://doi.org/10.17487/RFC5878</a></span>

SMPTE's HTML Pub

Preview:

IETF RFC 5878, Transport Layer Security (TLS) Authorization Extensions
doi: 10.17487/RFC5878
url: https://doi.org/10.17487/RFC5878

Snippet:

<li>
<cite id="bib-rfc5878">IETF RFC 5878</cite>, Transport Layer Security (TLS) Authorization Extensions
<span class="doi">10.17487/RFC5878</span>
</li>

Referenced By

IETF RFC 6042 [Active*]
IETF RFC 7562 [Active*]
IETF RFC 8447 [Active*]
IETF RFC 8996 [Active*]