Service Identity in TLS

Metadata

Publisher: IETF
Doc Type: Standard
Pages: 25
Abstract: Many application technologies enable secure communication between two entities by means of Transport Layer Security (TLS) with Internet Public Key Infrastructure using X.509 (PKIX) certificates. This document specifies procedures for representing and verifying the identity of application services in such interactions. This document obsoletes RFC 6125.
Publication Date: 2023-11-01
Status Note: Proposed Standard
DOI: 10.17487/RFC9525
Link: https://doi.org/10.17487/RFC9525
Author(s): Peter Saint-Andre
Rich Salz

Latest version of IETF RFC 9525

Document Versions — IETF RFC 9525

▶ IETF RFC 9525 (2023-11-01)

THIS DOC [ACTIVE] [LATEST VERSION]

Normative Reference(s)

IETF RFC 791 [Active*]
IETF RFC 1034 [Active*]
IETF RFC 2119 [Active*]
IETF RFC 2782 [Active*]
IETF RFC 3986 [Active, Amended*]
IETF RFC 4291 [Active*]
IETF RFC 4514 [Active*]
IETF RFC 4592 [Active*]
IETF RFC 4985 [Active*]
IETF RFC 5280 [Active, Amended*]
IETF RFC 5890 [Active*]
IETF RFC 5891 [Active*]
IETF RFC 8174 [Active*]
IETF RFC 9325 [Active*]

Bibliographic Reference(s)

INCITS.4.1986 — ANSI INCITS 4-1986 (R2002), Information Systems — Coded Character Sets — 7-Bit American National Standard Code for Information Interchange (7-Bit ASCII) [formerly ANSI X3.4–1986 (R1997)] EXTERNAL
Davis, M. and M. Suignard, "Unicode Security Mechanisms", Version 15.1.0, Revision 28, Unicode Technical Standard #39, September 2023, <https://unicode.org/reports/tr39/>. EXTERNAL
Davis, M. and M. Suignard, "Unicode Security Considerations", Revision 15, Unicode Technical Report #36, September 2014, <https://unicode.org/reports/tr36/>. EXTERNAL
Kirsten, S., et al., "Cross Site Scripting (XSS)", OWASP Foundation, 2020, <https://owasp.org/www-community/attacks/xss/>. EXTERNAL
Brinkmann, M., Dresen, C., Merget, R., Poddebniak, D., Müller, J., Somorovsky, J., Schwenk, J., and S. Schinzel, "ALPACA: Application Layer Protocol Confusion - Analyzing and Mitigating Cracks in TLS Authentication", 30th USENIX Security Symposium (USENIX Security 21), September 2021, <https://alpaca-attack.com/ALPACA.pdf>. EXTERNAL
Mozilla Foundation, "Public Suffix List", <https://publicsuffix.org>. EXTERNAL
Sokol, J. and R. Hansen, "HTTPS Can Byte Me", Black Hat Briefings, November 2010, <https://media.blackhat.com/bh-ad-10/Hansen/Blackhat-AD-2010-Hansen-Sokol-HTTPS-Can-Byte-Me-slides.pdf>. EXTERNAL
Marlinspike, M., "New Tricks for Defeating SSL in Practice", Black Hat DC, February 2009, <https://www.blackhat.com/presentations/bh-dc-09/Marlinspike/BlackHat-DC-09-Marlinspike-Defeating-SSL.pdf>. EXTERNAL
IETF RFC 3261 [Active*]
IETF RFC 3403 [Active*]
IETF RFC 4343 [Active*]
IETF RFC 4949 [Active*]
IETF RFC 5234 [Active, Amended*]
IETF RFC 5630 [Active*]
IETF RFC 5922 [Active*]
IETF RFC 6066 [Active*]
IETF RFC 6120 [Active*]
IETF RFC 6125 [Superseded*]
IETF RFC 6186 [Active*]
IETF RFC 6698 [Active*]
IETF RFC 7301 [Active*]
RFC7858 — RFC7858 EXTERNAL
IETF RFC 8446 [Superseded*]
RFC8555 — RFC8555 EXTERNAL
RFC8689 — RFC8689 EXTERNAL
IETF RFC 8915 [Active*]
IETF RFC 9000 [Active*]
RFC9001 — QUIC-TLS EXTERNAL
IETF RFC 9110 [Active*]
IETF RFC 9147 [Active*]
RFC9345 — RFC9345 EXTERNAL
RFC9460 — RFC9460 EXTERNAL
RFC9461 — RFC9461 EXTERNAL
ITU-T X.509 [Active]
T-REC-X.690.2021 — X690 EXTERNAL
W3C.secure-contexts — SECURE-CONTEXTS EXTERNAL
W3C.wsc-ui.20100812 — W3C.REC-wsc-ui-20100812 EXTERNAL
WHATWG.URL — WHATWG-URL EXTERNAL

Source Data (JSON)

Full registry record with provenance metadata. Open directly: /api/doc/RFC9525.json

Reference Tree

Explore all references and references to this document, as a navigable tree.

Open Reference Tree

Reference this Doc

Plain text (ISO 690 compliant)

Preview:

IETF RFC 9525, Service Identity in TLS. Available at https://doi.org/10.17487/RFC9525

Snippet:

IETF RFC 9525, Service Identity in TLS. Available at https://doi.org/10.17487/RFC9525

HTML (ISO 690 compliant)

Preview:

IETF RFC 9525, Service Identity in TLS. Available at https://doi.org/10.17487/RFC9525

Snippet:

<span class="citation"><cite>IETF RFC 9525</cite>, Service Identity in TLS. Available at <a href="https://doi.org/10.17487/RFC9525" target="_blank" rel="noopener">https://doi.org/10.17487/RFC9525</a></span>

SMPTE's HTML Pub

Preview:

IETF RFC 9525, Service Identity in TLS
doi: 10.17487/RFC9525
url: https://doi.org/10.17487/RFC9525

Snippet:

<li>
<cite id="bib-rfc9525">IETF RFC 9525</cite>, Service Identity in TLS
<span class="doi">10.17487/RFC9525</span>
</li>

Referenced By

IETF RFC 9846 [Active*]
IETF RFC 9918 [Active*]
IETF RFC 9930 [Active*]