Enhanced JSON Web Token (JWT) Claim Constraints for Secure Telephone Identity Revisited (STIR) Certificates

Metadata

Publisher: IETF
Doc Type: Standard
Pages: 12
Abstract: RFC 8226 specifies the use of certificates for Secure Telephone Identity Credentials; these certificates are often called "Secure Telephone Identity Revisited (STIR) Certificates". RFC 8226 provides a certificate extension to constrain the JSON Web Token (JWT) claims that can be included in the Personal Assertion Token (PASSporT), as defined in RFC 8225. If the PASSporT signer includes a JWT claim outside the constraint boundaries, then the PASSporT recipient will reject the entire PASSporT. This document updates RFC 8226; it provides all of the capabilities available in the original certificate extension as well as an additional way to constrain the allowable JWT claims. The enhanced extension can also provide a list of claims that are not allowed to be included in the PASSporT.
Publication Date: 2021-08-01
Status Note: Proposed Standard
DOI: 10.17487/RFC9118
Link: https://doi.org/10.17487/RFC9118
Author(s): Russ Housley
Keyword(s): X.509 Certificate Extension

Latest version of IETF RFC 9118

Document Versions — IETF RFC 9118

▶ IETF RFC 9118 (2021-08-01)

THIS DOC [ACTIVE] [LATEST VERSION]

Normative Reference(s)

IETF RFC 2119 [Active*]
IETF RFC 5280 [Active, Amended*]
IETF RFC 5912 [Active*]
IETF RFC 8174 [Active*]
IETF RFC 8225 [Active*]
IETF RFC 8226 [Active*]
T-REC-X.680.2021 — ASN.1 EXTERNAL

Bibliographic Reference(s)

IETF.draft-ietf-stir-passport-rcd-12 — I-D.ietf-stir-passport-rcd EXTERNAL
ISO 646:1991 [Active]
IETF RFC 4949 [Active*]
IETF RFC 7468 [Active*]
IETF RFC 9060 [Active*]

Source Data (JSON)

Full registry record with provenance metadata. Open directly: /api/doc/RFC9118.json

Amends:

IETF RFC 8226 [Active*]

Reference Tree

Explore all references and references to this document, as a navigable tree.

Open Reference Tree

Reference this Doc

Plain text (ISO 690 compliant)

Preview:

IETF RFC 9118, Enhanced JSON Web Token (JWT) Claim Constraints for Secure Telephone Identity Revisited (STIR) Certificates. Available at https://doi.org/10.17487/RFC9118

Snippet:

IETF RFC 9118, Enhanced JSON Web Token (JWT) Claim Constraints for Secure Telephone Identity Revisited (STIR) Certificates. Available at https://doi.org/10.17487/RFC9118

HTML (ISO 690 compliant)

Preview:

IETF RFC 9118, Enhanced JSON Web Token (JWT) Claim Constraints for Secure Telephone Identity Revisited (STIR) Certificates. Available at https://doi.org/10.17487/RFC9118

Snippet:

<span class="citation"><cite>IETF RFC 9118</cite>, Enhanced JSON Web Token (JWT) Claim Constraints for Secure Telephone Identity Revisited (STIR) Certificates. Available at <a href="https://doi.org/10.17487/RFC9118" target="_blank" rel="noopener">https://doi.org/10.17487/RFC9118</a></span>

SMPTE's HTML Pub

Preview:

IETF RFC 9118, Enhanced JSON Web Token (JWT) Claim Constraints for Secure Telephone Identity Revisited (STIR) Certificates
doi: 10.17487/RFC9118
url: https://doi.org/10.17487/RFC9118

Snippet:

<li>
<cite id="bib-rfc9118">IETF RFC 9118</cite>, Enhanced JSON Web Token (JWT) Claim Constraints for Secure Telephone Identity Revisited (STIR) Certificates
<span class="doi">10.17487/RFC9118</span>
</li>