EAP-TLS 1.3: Using the Extensible Authentication Protocol with TLS 1.3
Metadata
- Publisher
- IETF
- Doc Type
- Standard
- Pages
- 31
- Abstract
- The Extensible Authentication Protocol (EAP), defined in RFC 3748, provides a standard mechanism for support of multiple authentication methods. This document specifies the use of EAP-TLS with TLS 1.3 while remaining backwards compatible with existing implementations of EAP-TLS. TLS 1.3 provides significantly improved security and privacy, and reduced latency when compared to earlier versions of TLS. EAP-TLS with TLS 1.3 (EAP-TLS 1.3) further improves security and privacy by always providing forward secrecy, never disclosing the peer identity, and by mandating use of revocation checking when compared to EAP-TLS with earlier versions of TLS. This document also provides guidance on authentication, authorization, and resumption for EAP-TLS in general (regardless of the underlying TLS version used). This document updates RFC 5216.
- Publication Date
- 2022-02-01
- Status Note
- Proposed Standard
- DOI
10.17487/RFC9190- Link
- https://doi.org/10.17487/RFC9190
- Author(s)
- John Preuß MattssonMohit Sethi
Latest version of IETF RFC 9190
Document Versions — IETF RFC 9190
-
▶ IETF RFC 9190 (2022-02-01)THIS DOC [ACTIVE] [LATEST VERSION]
Normative Reference(s)
- IETF RFC 2119 [Active*]
- IETF RFC 3748 [Active*]
- IETF RFC 5216 [Active*]
- IETF RFC 5280 [Active, Amended*]
- IETF RFC 5705 [Active*]
- IETF RFC 6066 [Active*]
- IETF RFC 6960 [Active*]
- IETF RFC 7542 [Active*]
- IETF RFC 8174 [Active*]
- IETF RFC 8446 [Superseded*]
Bibliographic Reference(s)
- 3GPP.TS-33.501.202201 — TS.33.501 EXTERNAL
- 10.1109-IEEESTD.2016.7786995 — IEEE.802.11-2016 EXTERNAL
- 10.1109-IEEESTD.2018.8585421 — IEEE802.1AE-2018 EXTERNAL
- 10.1109-IEEESTD.2020.9018454 — IEEE8021X EXTERNAL
- IETF draft-ietf-emu-tls-eap-types-04 [Active*]
- IETF draft-ietf-tls-rfc8446bis-03 [Active*]
- IETF draft-ietf-tls-ticketrequests-07 [Active*]
- MFA.MulteFire.r1.1.2019 — MulteFire EXTERNAL
- MS.PEAP.20210625 — MS-PEAP EXTERNAL
- IETF RFC 1661 [Active*]
- IETF RFC 2246 [Superseded*]
- IETF RFC 2560 [Superseded*]
- IETF RFC 2865 [Active*]
- IETF RFC 3280 [Superseded*]
- IETF RFC 4137 [Active*]
- IETF RFC 4282 [Superseded*]
- IETF RFC 4346 [Superseded*]
- IETF RFC 4851 [Active*]
- IETF RFC 5077 [Superseded*]
- IETF RFC 5191 [Active*]
- IETF RFC 5246 [Superseded*]
- IETF RFC 5247 [Active*]
- IETF RFC 5281 [Active*]
- IETF RFC 6125 [Superseded*]
- IETF RFC 6733 [Active*]
- IETF RFC 7170 [Superseded*]
- IETF RFC 7406 [Active*]
- IETF RFC 7457 [Active*]
- IETF RFC 7525 [Superseded*]
- IETF RFC 7593 [Active*]
- IETF RFC 8126 [Active*]
- IETF RFC 8447 [Active*]
- IETF RFC 8996 [Active*]
- IETF RFC 9155 [Active*]
- IETF RFC 9191 [Active*]
Source Data (JSON)
Full registry record with provenance metadata. Open directly: /api/doc/RFC9190.json
Amends:
IETF RFC 5216 [Active*]
Amended by:
IETF RFC 9965 [Active*]
Reference Tree
Explore all references and references to this document, as a navigable tree.
Open Reference TreeReference this Doc
Plain text (ISO 690 compliant)
Preview:
IETF RFC 9190, EAP-TLS 1.3: Using the Extensible Authentication Protocol with TLS 1.3. Available at https://doi.org/10.17487/RFC9190
Snippet:
IETF RFC 9190, EAP-TLS 1.3: Using the Extensible Authentication Protocol with TLS 1.3. Available at https://doi.org/10.17487/RFC9190
HTML (ISO 690 compliant)
Preview:
IETF RFC 9190, EAP-TLS 1.3: Using the Extensible Authentication Protocol with TLS 1.3. Available at https://doi.org/10.17487/RFC9190
Snippet:
<span class="citation"><cite>IETF RFC 9190</cite>, EAP-TLS 1.3: Using the Extensible Authentication Protocol with TLS 1.3. Available at <a href="https://doi.org/10.17487/RFC9190" target="_blank" rel="noopener">https://doi.org/10.17487/RFC9190</a></span>
SMPTE's HTML Pub
Preview:
IETF RFC 9190, EAP-TLS 1.3: Using the Extensible Authentication Protocol with TLS 1.3
doi: 10.17487/RFC9190
url: https://doi.org/10.17487/RFC9190
doi: 10.17487/RFC9190
url: https://doi.org/10.17487/RFC9190
Snippet:
<li> <cite id="bib-rfc9190">IETF RFC 9190</cite>, EAP-TLS 1.3: Using the Extensible Authentication Protocol with TLS 1.3 <span class="doi">10.17487/RFC9190</span> </li>
Referenced By
- IETF RFC 9191 [Active*]
- IETF RFC 9427 [Active*]
- IETF RFC 9678 [Active*]
- IETF RFC 9930 [Active*]
- IETF RFC 9965 [Active*]