Considerations around Transport Header Confidentiality, Network Operations, and the Evolution of Internet Transport Protocols
Metadata
- Publisher
- IETF
- Doc Type
- Informational
- Pages
- 37
- Abstract
- To protect user data and privacy, Internet transport protocols have supported payload encryption and authentication for some time. Such encryption and authentication are now also starting to be applied to the transport protocol headers. This helps avoid transport protocol ossification by middleboxes, mitigate attacks against the transport protocol, and protect metadata about the communication. Current operational practice in some networks inspect transport header information within the network, but this is no longer possible when those transport headers are encrypted. This document discusses the possible impact when network traffic uses a protocol with an encrypted transport header. It suggests issues to consider when designing new transport protocols or features.
- Publication Date
- 2021-07-01
- Status Note
- Informational
- DOI
10.17487/RFC9065- Link
- https://doi.org/10.17487/RFC9065
- Author(s)
- Gorry FairhurstColin Perkins
- Keyword(s)
- Transport Design, Operations and Management
Latest version of IETF RFC 9065
Document Versions — IETF RFC 9065
-
▶ IETF RFC 9065 (2021-07-01)THIS DOC [ACTIVE] [LATEST VERSION]
Bibliographic Reference(s)
- 10.1109-COMST.2014.2375213 — Latency EXTERNAL
- 10.1145-2063176.2063196 — BLOAT EXTERNAL
- GITHUB.google.quic-trace — Quic-Trace EXTERNAL
- IETF.draft-ietf-6man-ipv6-alt-mark-06 — I-D.ietf-6man-ipv6-alt-mark EXTERNAL
- IETF.draft-ietf-ippm-ioam-data-12 — I-D.ietf-ippm-ioam-data EXTERNAL
- IETF.draft-ietf-quic-qlog-main-schema-00 — I-D.ietf-quic-qlog-main-schema EXTERNAL
- IETF.draft-ietf-tls-dtls13-43 — I-D.ietf-tls-dtls13 EXTERNAL
- IETF.draft-trammell-plus-abstract-mech-00 — I-D.trammell-plus-abstract-mech EXTERNAL
- Trammell, B. and M. Kuehlewind, "Revisiting the Privacy Implications of Two-Way Internet Latency Data", Passive and Active Measurement, March 2018. EXTERNAL
- Fairhurst, G., Kuehlewind, M., and D. Lopez, "Measurement-based Protocol Design", European Conference on Networks and Communications, Oulu, Finland., June 2017. EXTERNAL
- IETF RFC 791 [Active*]
- IETF RFC 2410 [Active*]
- IETF RFC 2474 [Active*]
- IETF RFC 2475 [Active*]
- IETF RFC 2507 [Active*]
- IETF RFC 2508 [Active*]
- IETF RFC 2914 [Active*]
- IETF RFC 3168 [Active*]
- IETF RFC 3234 [Active*]
- IETF RFC 3261 [Active*]
- IETF RFC 3393 [Active*]
- IETF RFC 3550 [Active*]
- IETF RFC 3552 [Active*]
- IETF RFC 3711 [Active*]
- IETF RFC 4302 [Active*]
- IETF RFC 4303 [Active*]
- IETF RFC 4585 [Active*]
- IETF RFC 4737 [Active*]
- IETF RFC 4960 [Superseded*]
- IETF RFC 5166 [Active*]
- IETF RFC 5218 [Active*]
- RFC5236 — RFC5236 EXTERNAL
- IETF RFC 5426 [Active*]
- IETF RFC 5481 [Active*]
- IETF RFC 5795 [Active*]
- IETF RFC 5925 [Active*]
- IETF RFC 6056 [Active*]
- IETF RFC 6269 [Active*]
- IETF RFC 6294 [Active*]
- IETF RFC 6347 [Superseded*]
- IETF RFC 6437 [Active*]
- IETF RFC 6438 [Active*]
- IETF RFC 6846 [Active*]
- IETF RFC 6973 [Active*]
- RFC7098 — RFC7098 EXTERNAL
- RFC7126 — RFC7126 EXTERNAL
- IETF RFC 7258 [Active*]
- IETF RFC 7413 [Active*]
- IETF RFC 7414 [Active*]
- IETF RFC 7567 [Active*]
- IETF RFC 7594 [Active*]
- IETF RFC 7605 [Active*]
- IETF RFC 7624 [Active*]
- IETF RFC 7799 [Active*]
- IETF RFC 7872 [Active*]
- IETF RFC 7928 [Active*]
- IETF RFC 7983 [Active*]
- IETF RFC 8033 [Active*]
- IETF RFC 8084 [Active*]
- IETF RFC 8085 [Active*]
- IETF RFC 8086 [Active*]
- IETF RFC 8087 [Active*]
- IETF RFC 8095 [Active*]
- IETF RFC 8200 [Active*]
- IETF RFC 8250 [Active*]
- IETF RFC 8289 [Active*]
- IETF RFC 8290 [Active*]
- RFC8404 — RFC8404 EXTERNAL
- IETF RFC 8446 [Superseded*]
- RFC8462 — RFC8462 EXTERNAL
- RFC8517 — RFC8517 EXTERNAL
- IETF RFC 8546 [Active*]
- IETF RFC 8548 [Active*]
- IETF RFC 8558 [Active*]
- IETF RFC 8684 [Active*]
- IETF RFC 8701 [Active*]
- IETF RFC 8724 [Active*]
- RFC8837 — RFC8837 EXTERNAL
- IETF RFC 8866 [Active*]
- RFC8922 — RFC8922 EXTERNAL
- IETF RFC 9000 [Active*]
Source Data (JSON)
Full registry record with provenance metadata. Open directly: /api/doc/RFC9065.json
Reference Tree
Explore all references and references to this document, as a navigable tree.
Open Reference TreeReference this Doc
Plain text (ISO 690 compliant)
Preview:
IETF RFC 9065, Considerations around Transport Header Confidentiality, Network Operations, and the Evolution of Internet Transport Protocols. Available at https://doi.org/10.17487/RFC9065
Snippet:
IETF RFC 9065, Considerations around Transport Header Confidentiality, Network Operations, and the Evolution of Internet Transport Protocols. Available at https://doi.org/10.17487/RFC9065
HTML (ISO 690 compliant)
Preview:
IETF RFC 9065, Considerations around Transport Header Confidentiality, Network Operations, and the Evolution of Internet Transport Protocols. Available at https://doi.org/10.17487/RFC9065
Snippet:
<span class="citation"><cite>IETF RFC 9065</cite>, Considerations around Transport Header Confidentiality, Network Operations, and the Evolution of Internet Transport Protocols. Available at <a href="https://doi.org/10.17487/RFC9065" target="_blank" rel="noopener">https://doi.org/10.17487/RFC9065</a></span>
SMPTE's HTML Pub
Preview:
IETF RFC 9065, Considerations around Transport Header Confidentiality, Network Operations, and the Evolution of Internet Transport Protocols
doi: 10.17487/RFC9065
url: https://doi.org/10.17487/RFC9065
doi: 10.17487/RFC9065
url: https://doi.org/10.17487/RFC9065
Snippet:
<li> <cite id="bib-rfc9065">IETF RFC 9065</cite>, Considerations around Transport Header Confidentiality, Network Operations, and the Evolution of Internet Transport Protocols <span class="doi">10.17487/RFC9065</span> </li>
Referenced By
- IETF RFC 9293 [Active*]