Delegated Credentials for TLS and DTLS

Metadata

Publisher: IETF
Doc Type: Standard
Pages: 17
Abstract: The organizational separation between operators of TLS and DTLS endpoints and the certification authority can create limitations. For example, the lifetime of certificates, how they may be used, and the algorithms they support are ultimately determined by the Certification Authority (CA). This document describes a mechanism to overcome some of these limitations by enabling operators to delegate their own credentials for use in TLS and DTLS without breaking compatibility with peers that do not support this specification.
Publication Date: 2023-07-01
Status Note: Proposed Standard
DOI: 10.17487/RFC9345
Link: https://doi.org/10.17487/RFC9345
Author(s): Richard Barnes
Subodh Iyengar
Nick Sullivan
Eric Rescorla
Keyword(s): Authentication, TLS 1.3, Signature Scheme

Latest version of IETF RFC 9345

Document Versions — IETF RFC 9345

▶ IETF RFC 9345 (2023-07-01)

THIS DOC [ACTIVE] [LATEST VERSION]

Normative Reference(s)

ISO 8824-1 [Active, Amended]
ISO 8825-1 [Active]
IETF RFC 2119 [Active*]
IETF RFC 5280 [Active, Amended*]
IETF RFC 8174 [Active*]
IETF RFC 8446 [Superseded*]
IETF RFC 9147 [Active*]

Bibliographic Reference(s)

10.1007-BFb0055716 — BLEI EXTERNAL
10.1145-2810103.2813657 — XPROT EXTERNAL
Boeck, H., Somorovsky, J., and C. Young, "Return Of Bleichenbacher's Oracle Threat (ROBOT)", 27th USENIX Security Symposium, 2018, <https://www.usenix.org/conference/usenixsecurity18/presentation/bock>. EXTERNAL
Stebila, D. and N. Sullivan, "An Analysis of TLS Handshake Proxying", IEEE Trustcom/BigDataSE/ISPA 2015, 2015, <https://ieeexplore.ieee.org/document/7345293>. EXTERNAL
IETF RFC 3820 [Active*]
IETF RFC 5246 [Superseded*]
IETF RFC 5912 [Active*]
IETF RFC 8032 [Active*]
IETF RFC 8555 [Active*]

Source Data (JSON)

Full registry record with provenance metadata. Open directly: /api/doc/RFC9345.json

Reference Tree

Explore all references and references to this document, as a navigable tree.

Open Reference Tree

Reference this Doc

Plain text (ISO 690 compliant)

Preview:

IETF RFC 9345, Delegated Credentials for TLS and DTLS. Available at https://doi.org/10.17487/RFC9345

Snippet:

IETF RFC 9345, Delegated Credentials for TLS and DTLS. Available at https://doi.org/10.17487/RFC9345

HTML (ISO 690 compliant)

Preview:

IETF RFC 9345, Delegated Credentials for TLS and DTLS. Available at https://doi.org/10.17487/RFC9345

Snippet:

<span class="citation"><cite>IETF RFC 9345</cite>, Delegated Credentials for TLS and DTLS. Available at <a href="https://doi.org/10.17487/RFC9345" target="_blank" rel="noopener">https://doi.org/10.17487/RFC9345</a></span>

SMPTE's HTML Pub

Preview:

IETF RFC 9345, Delegated Credentials for TLS and DTLS
doi: 10.17487/RFC9345
url: https://doi.org/10.17487/RFC9345

Snippet:

<li>
<cite id="bib-rfc9345">IETF RFC 9345</cite>, Delegated Credentials for TLS and DTLS
<span class="doi">10.17487/RFC9345</span>
</li>

Referenced By

IETF RFC 9525 [Active*]
IETF RFC 9846 [Active*]