X.509v3 Transport Layer Security (TLS) Feature Extension
Metadata
- Publisher
- IETF
- Doc Type
- Standard
- Pages
- 11
- Abstract
- The purpose of the TLS feature extension is to prevent downgrade attacks that are not otherwise prevented by the TLS protocol. In particular, the TLS feature extension may be used to mandate support for revocation checking features in the TLS protocol such as Online Certificate Status Protocol (OCSP) stapling. Informing clients that an OCSP status response will always be stapled permits an immediate failure in the case that the response is not stapled. This in turn prevents a denial-of-service attack that might otherwise be possible.
- Publication Date
- 2015-10-01
- Status Note
- Proposed Standard
- DOI
10.17487/RFC7633- Link
- https://doi.org/10.17487/RFC7633
- Author(s)
- Phillip Hallam-Baker
- Keyword(s)
- PKIX, TLS, Cryptography Certificate
Latest version of IETF RFC 7633
Document Versions — IETF RFC 7633
-
▶ IETF RFC 7633 (2015-10-01)THIS DOC [ACTIVE] [LATEST VERSION]
Normative Reference(s)
- IETF RFC 2119 [Active*]
- IETF RFC 2986 [Active*]
- IETF RFC 5246 [Superseded*]
- IETF RFC 5280 [Active, Amended*]
- IETF RFC 5912 [Active*]
- IETF RFC 6066 [Active*]
- RFC6844 — RFC6844 EXTERNAL
- IETF RFC 6961 [Superseded*]
Source Data (JSON)
Full registry record with provenance metadata. Open directly: /api/doc/RFC7633.json
Reference Tree
Explore all references and references to this document, as a navigable tree.
Open Reference TreeReference this Doc
Plain text (ISO 690 compliant)
Preview:
IETF RFC 7633, X.509v3 Transport Layer Security (TLS) Feature Extension. Available at https://doi.org/10.17487/RFC7633
Snippet:
IETF RFC 7633, X.509v3 Transport Layer Security (TLS) Feature Extension. Available at https://doi.org/10.17487/RFC7633
HTML (ISO 690 compliant)
Preview:
IETF RFC 7633, X.509v3 Transport Layer Security (TLS) Feature Extension. Available at https://doi.org/10.17487/RFC7633
Snippet:
<span class="citation"><cite>IETF RFC 7633</cite>, X.509v3 Transport Layer Security (TLS) Feature Extension. Available at <a href="https://doi.org/10.17487/RFC7633" target="_blank" rel="noopener">https://doi.org/10.17487/RFC7633</a></span>
SMPTE's HTML Pub
Preview:
IETF RFC 7633, X.509v3 Transport Layer Security (TLS) Feature Extension
doi: 10.17487/RFC7633
url: https://doi.org/10.17487/RFC7633
doi: 10.17487/RFC7633
url: https://doi.org/10.17487/RFC7633
Snippet:
<li> <cite id="bib-rfc7633">IETF RFC 7633</cite>, X.509v3 Transport Layer Security (TLS) Feature Extension <span class="doi">10.17487/RFC7633</span> </li>
Referenced By
- IETF RFC 9162 [Active*]
- IETF RFC 9325 [Active*]