Use Cases and Requirements for DNS-Based Authentication of Named Entities (DANE)
Metadata
- Publisher
- IETF
- Doc Type
- Informational
- Pages
- 12
- Abstract
- Many current applications use the certificate-based authentication features in Transport Layer Security (TLS) to allow clients to verify that a connected server properly represents a desired domain name. Typically, this authentication has been based on PKIX certificate chains rooted in well-known certificate authorities (CAs), but additional information can be provided via the DNS itself. This document describes a set of use cases in which the DNS and DNS Security Extensions (DNSSEC) could be used to make assertions that support the TLS authentication process. The main focus of this document is TLS server authentication, but it also covers TLS client authentication for applications where TLS clients are identified by domain names. [STANDARDS-TRACK]
- Publication Date
- 2011-10-01
- Status Note
- Informational
- DOI
10.17487/RFC6394- Link
- https://doi.org/10.17487/RFC6394
- Author(s)
- Richard Barnes
- Keyword(s)
- TLS, PKIX
Latest version of IETF RFC 6394
Document Versions — IETF RFC 6394
-
▶ IETF RFC 6394 (2011-10-01)THIS DOC [ACTIVE] [LATEST VERSION]
Normative Reference(s)
- IETF RFC 4033 [Active*]
- IETF RFC 5246 [Superseded*]
- IETF RFC 5280 [Active, Amended*]
- IETF RFC 6125 [Superseded*]
Bibliographic Reference(s)
- IETF RFC 2595 [Active*]
- IETF RFC 2818 [Superseded*]
- IETF RFC 3207 [Active*]
- IETF RFC 3261 [Active*]
- IETF RFC 6120 [Active*]
Source Data (JSON)
Full registry record with provenance metadata. Open directly: /api/doc/RFC6394.json
Reference Tree
Explore all references and references to this document, as a navigable tree.
Open Reference TreeReference this Doc
Plain text (ISO 690 compliant)
Preview:
IETF RFC 6394, Use Cases and Requirements for DNS-Based Authentication of Named Entities (DANE). Available at https://doi.org/10.17487/RFC6394
Snippet:
IETF RFC 6394, Use Cases and Requirements for DNS-Based Authentication of Named Entities (DANE). Available at https://doi.org/10.17487/RFC6394
HTML (ISO 690 compliant)
Preview:
IETF RFC 6394, Use Cases and Requirements for DNS-Based Authentication of Named Entities (DANE). Available at https://doi.org/10.17487/RFC6394
Snippet:
<span class="citation"><cite>IETF RFC 6394</cite>, Use Cases and Requirements for DNS-Based Authentication of Named Entities (DANE). Available at <a href="https://doi.org/10.17487/RFC6394" target="_blank" rel="noopener">https://doi.org/10.17487/RFC6394</a></span>
SMPTE's HTML Pub
Preview:
IETF RFC 6394, Use Cases and Requirements for DNS-Based Authentication of Named Entities (DANE)
doi: 10.17487/RFC6394
url: https://doi.org/10.17487/RFC6394
doi: 10.17487/RFC6394
url: https://doi.org/10.17487/RFC6394
Snippet:
<li> <cite id="bib-rfc6394">IETF RFC 6394</cite>, Use Cases and Requirements for DNS-Based Authentication of Named Entities (DANE) <span class="doi">10.17487/RFC6394</span> </li>
Referenced By
- IETF RFC 6698 [Active*]
- IETF RFC 6950 [Active*]
- IETF RFC 7670 [Active*]