TCP-ENO: Encryption Negotiation Option

Metadata

Publisher: IETF
Doc Type: Experimental
Pages: 31
Abstract: Despite growing adoption of TLS, a significant fraction of TCP traffic on the Internet remains unencrypted. The persistence of unencrypted traffic can be attributed to at least two factors. First, some legacy protocols lack a signaling mechanism (such as a STARTTLS command) by which to convey support for encryption, thus making incremental deployment impossible. Second, legacy applications themselves cannot always be upgraded and therefore require a way to implement encryption transparently entirely within the transport layer. The TCP Encryption Negotiation Option (TCP-ENO) addresses both of these problems through a new TCP option kind providing out-of-band, fully backward-compatible negotiation of encryption.
Publication Date: 2019-05-01
Status Note: Experimental
DOI: 10.17487/RFC8547
Link: https://doi.org/10.17487/RFC8547
Author(s): Andrea Bittau
Daniel B. Giffin
Mark J. Handley
David Mazieres
Eric W. Smith
Keyword(s): TCP, Encryption

Latest version of IETF RFC 8547

Document Versions — IETF RFC 8547

▶ IETF RFC 8547 (2019-05-01)

THIS DOC [ACTIVE] [LATEST VERSION]

Normative Reference(s)

NIST.SP.800-57 — NIST.SP800-57 EXTERNAL
IETF RFC 793 [Superseded*]
IETF RFC 2119 [Active*]
IETF RFC 4086 [Active*]
IETF RFC 7120 [Active*]
IETF RFC 8126 [Active*]
IETF RFC 8174 [Active*]

Bibliographic Reference(s)

IETF RFC 3493 [Active*]
IETF RFC 4253 [Active*]
IETF RFC 4987 [Active*]
IETF RFC 5116 [Active*]
IETF RFC 5382 [Active*]
IETF RFC 5802 [Active*]
IETF RFC 6394 [Active*]
IETF RFC 6994 [Active*]
IETF RFC 7413 [Active*]
IETF RFC 7435 [Active*]
IETF RFC 7616 [Active*]
IETF RFC 8446 [Superseded*]

Source Data (JSON)

Full registry record with provenance metadata. Open directly: /api/doc/RFC8547.json

Reference Tree

Explore all references and references to this document, as a navigable tree.

Open Reference Tree

Reference this Doc

Plain text (ISO 690 compliant)

Preview:

IETF RFC 8547, TCP-ENO: Encryption Negotiation Option. Available at https://doi.org/10.17487/RFC8547

Snippet:

IETF RFC 8547, TCP-ENO: Encryption Negotiation Option. Available at https://doi.org/10.17487/RFC8547

HTML (ISO 690 compliant)

Preview:

IETF RFC 8547, TCP-ENO: Encryption Negotiation Option. Available at https://doi.org/10.17487/RFC8547

Snippet:

<span class="citation"><cite>IETF RFC 8547</cite>, TCP-ENO: Encryption Negotiation Option. Available at <a href="https://doi.org/10.17487/RFC8547" target="_blank" rel="noopener">https://doi.org/10.17487/RFC8547</a></span>

SMPTE's HTML Pub

Preview:

IETF RFC 8547, TCP-ENO: Encryption Negotiation Option
doi: 10.17487/RFC8547
url: https://doi.org/10.17487/RFC8547

Snippet:

<li>
<cite id="bib-rfc8547">IETF RFC 8547</cite>, TCP-ENO: Encryption Negotiation Option
<span class="doi">10.17487/RFC8547</span>
</li>

Referenced By

IETF RFC 8548 [Active*]