Public Key Pinning Extension for HTTP

Metadata

Publisher: IETF
Doc Type: Standard
Pages: 28
Abstract: This document defines a new HTTP header that allows web host operators to instruct user agents to remember ("pin") the hosts' cryptographic identities over a period of time. During that time, user agents (UAs) will require that the host presents a certificate chain including at least one Subject Public Key Info structure whose fingerprint matches one of the pinned fingerprints for that host. By effectively reducing the number of trusted authorities who can authenticate the domain during the lifetime of the pin, pinning may reduce the incidence of man-in-the-middle attacks due to compromised Certification Authorities.
Publication Date: 2015-04-01
Status Note: Proposed Standard
DOI: 10.17487/RFC7469
Link: https://doi.org/10.17487/RFC7469
Author(s): Chris Evans
Chris Palmer
Ryan Sleevi
Keyword(s): PIN

Latest version of IETF RFC 7469

Document Versions — IETF RFC 7469

▶ IETF RFC 7469 (2015-04-01)

THIS DOC [ACTIVE] [LATEST VERSION]

Normative Reference(s)

IANA, "Message Headers", < http://www.iana.org/assignments/message-headers/ >. EXTERNAL
IETF RFC 2119 [Active*]
IETF RFC 3339 [Active*]
IETF RFC 3986 [Active, Amended*]
IETF RFC 4648 [Active*]
IETF RFC 5234 [Active, Amended*]
IETF RFC 5246 [Superseded*]
IETF RFC 5280 [Active, Amended*]
IETF RFC 6234 [Active*]
IETF RFC 6265 [Active*]
IETF RFC 6797 [Active*]
IETF RFC 7159 [Superseded*]
IETF RFC 7230 [Superseded*]
IETF RFC 7234 [Superseded*]
RFC7468 — RFC7468 EXTERNAL
W3C.html401.19991224 — [HTML-4.01] REC-html401-19991224, W3C Recommendation: HTML 4.01 Specification (December 24 th , 1999). EXTERNAL

Bibliographic Reference(s)

IETF.draft-perrin-tls-tack-02 — TACK EXTERNAL
Langley, A., "Public Key Pinning", Imperial Violet: Adam Langley's Weblog, May 2011, < https://www.imperialviolet.org/2011/05/04/pinning.html >. EXTERNAL
IETF RFC 3546 [Superseded*]
IETF RFC 6962 [Superseded*]

Source Data (JSON)

Full registry record with provenance metadata. Open directly: /api/doc/RFC7469.json

Reference Tree

Explore all references and references to this document, as a navigable tree.

Open Reference Tree

Reference this Doc

Plain text (ISO 690 compliant)

Preview:

IETF RFC 7469, Public Key Pinning Extension for HTTP. Available at https://doi.org/10.17487/RFC7469

Snippet:

IETF RFC 7469, Public Key Pinning Extension for HTTP. Available at https://doi.org/10.17487/RFC7469

HTML (ISO 690 compliant)

Preview:

IETF RFC 7469, Public Key Pinning Extension for HTTP. Available at https://doi.org/10.17487/RFC7469

Snippet:

<span class="citation"><cite>IETF RFC 7469</cite>, Public Key Pinning Extension for HTTP. Available at <a href="https://doi.org/10.17487/RFC7469" target="_blank" rel="noopener">https://doi.org/10.17487/RFC7469</a></span>

SMPTE's HTML Pub

Preview:

IETF RFC 7469, Public Key Pinning Extension for HTTP
doi: 10.17487/RFC7469
url: https://doi.org/10.17487/RFC7469

Snippet:

<li>
<cite id="bib-rfc7469">IETF RFC 7469</cite>, Public Key Pinning Extension for HTTP
<span class="doi">10.17487/RFC7469</span>
</li>

Referenced By

IETF RFC 7711 [Active*]
IETF RFC 7838 [Active*]
IETF RFC 8155 [Active*]
IETF RFC 8314 [Active*]