RADIUS/1.1: Leveraging Application-Layer Protocol Negotiation (ALPN) to Remove MD5
Metadata
- Publisher
- IETF
- Doc Type
- Experimental
- Pages
- 31
- Abstract
- This document defines Application-Layer Protocol Negotiation (ALPN) extensions for use with RADIUS/TLS and RADIUS/DTLS. These extensions permit the negotiation of an application protocol variant of RADIUS called "RADIUS/1.1". No changes are made to RADIUS/UDP or RADIUS/TCP. The extensions allow the negotiation of a transport profile where the RADIUS shared secret is no longer used, and all MD5-based packet authentication and attribute obfuscation methods are removed. This document updates RFCs 2865, 2866, 5176, 6613, 6614, and 7360.
- Publication Date
- 2025-04-01
- Status Note
- Experimental
- DOI
10.17487/RFC9765- Link
- https://doi.org/10.17487/RFC9765
- Author(s)
- Alan DeKok
- Keyword(s)
- RADIUS, ALPN, MD5, FIPS 140, TLS
Latest version of IETF RFC 9765
Document Versions — IETF RFC 9765
-
▶ IETF RFC 9765 (2025-04-01)THIS DOC [ACTIVE] [LATEST VERSION]
Normative Reference(s)
- IETF RFC 2119 [Active*]
- IETF RFC 2865 [Active*]
- RFC6421 — RFC6421 EXTERNAL
- IETF RFC 6614 [Active*]
- IETF RFC 6929 [Active*]
- IETF RFC 7301 [Active*]
- RFC7360 — RFC7360 EXTERNAL
- IETF RFC 8044 [Active*]
- IETF RFC 8174 [Active*]
Bibliographic Reference(s)
- GITHUB.joswr1ght.asleap — ASLEAP EXTERNAL
- IETF.draft-ietf-radext-deprecating-radius-05 — I-D.ietf-radext-deprecating-radius EXTERNAL
- NIST FIPS 140-3 [Active]
- Wireless Broadband Alliance, "OpenRoaming: One global Wi-Fi network", <https://wballiance.com/openroaming/>. EXTERNAL
- eduroam, "eduroam", <https://eduroam.org>. EXTERNAL
- IETF RFC 1321 [Active*]
- IETF RFC 2548 [Active*]
- IETF RFC 2866 [Active*]
- IETF RFC 2868 [Active*]
- IETF RFC 3539 [Active*]
- IETF RFC 3579 [Active*]
- IETF RFC 5077 [Superseded*]
- IETF RFC 5080 [Active*]
- IETF RFC 5176 [Active*]
- IETF RFC 5281 [Active*]
- IETF RFC 5931 [Active*]
- IETF RFC 6151 [Active*]
- RFC6218 — RFC6218 EXTERNAL
- IETF RFC 6613 [Active*]
- IETF RFC 7585 [Active*]
- IETF RFC 7593 [Active*]
- IETF RFC 7930 [Active*]
- IETF RFC 8446 [Superseded*]
Source Data (JSON)
Full registry record with provenance metadata. Open directly: /api/doc/RFC9765.json
Reference Tree
Explore all references and references to this document, as a navigable tree.
Open Reference TreeReference this Doc
Plain text (ISO 690 compliant)
Preview:
IETF RFC 9765, RADIUS/1.1: Leveraging Application-Layer Protocol Negotiation (ALPN) to Remove MD5. Available at https://doi.org/10.17487/RFC9765
Snippet:
IETF RFC 9765, RADIUS/1.1: Leveraging Application-Layer Protocol Negotiation (ALPN) to Remove MD5. Available at https://doi.org/10.17487/RFC9765
HTML (ISO 690 compliant)
Preview:
IETF RFC 9765, RADIUS/1.1: Leveraging Application-Layer Protocol Negotiation (ALPN) to Remove MD5. Available at https://doi.org/10.17487/RFC9765
Snippet:
<span class="citation"><cite>IETF RFC 9765</cite>, RADIUS/1.1: Leveraging Application-Layer Protocol Negotiation (ALPN) to Remove MD5. Available at <a href="https://doi.org/10.17487/RFC9765" target="_blank" rel="noopener">https://doi.org/10.17487/RFC9765</a></span>
SMPTE's HTML Pub
Preview:
IETF RFC 9765, RADIUS/1.1: Leveraging Application-Layer Protocol Negotiation (ALPN) to Remove MD5
doi: 10.17487/RFC9765
url: https://doi.org/10.17487/RFC9765
doi: 10.17487/RFC9765
url: https://doi.org/10.17487/RFC9765
Snippet:
<li> <cite id="bib-rfc9765">IETF RFC 9765</cite>, RADIUS/1.1: Leveraging Application-Layer Protocol Negotiation (ALPN) to Remove MD5 <span class="doi">10.17487/RFC9765</span> </li>