The eap.arpa. Domain and Extensible Authentication Protocol (EAP) Provisioning

Metadata

Publisher: IETF
Doc Type: Standard
Pages: 21
Abstract: This document defines the eap.arpa. domain for use only in Network Access Identifiers (NAIs) as a way for Extensible Authentication Protocol (EAP) peers to signal to EAP servers that they wish to obtain limited, and unauthenticated, network access. EAP peers signal which kind of access is required via certain predefined identifiers that use the NAI format of RFC 7542. A table of identifiers and meanings is defined, which includes entries for RFC 9140. This document updates RFCs 5216 and 9190 to define an unauthenticated provisioning method. Those specifications suggest that such a method is possible, but they do not define how it would be done. This document also updates RFC 9140 to deprecate "eap-noob.arpa" and replace it with "@noob.eap.arpa".
Publication Date: 2026-05-01
Status Note: Proposed Standard
DOI: 10.17487/RFC9965
Link: https://doi.org/10.17487/RFC9965
Author(s): Alan DeKok

Latest version of IETF RFC 9965

Document Versions — IETF RFC 9965

▶ IETF RFC 9965 (2026-05-01)

THIS DOC [ACTIVE] [LATEST VERSION]

Normative Reference(s)

IETF RFC 1034 [Active*]
IETF RFC 2119 [Active*]
IETF RFC 3748 [Active*]
IETF RFC 5216 [Active*]
IETF RFC 7542 [Active*]
IETF RFC 8126 [Active*]
IETF RFC 8174 [Active*]
RFC9140 — RFC9140 EXTERNAL

Bibliographic Reference(s)

10.1109-IEEESTD.2011.5721908 — IEEE802.11u EXTERNAL
10.1109-IEEESTD.2020.9018454 — IEEE-802.1X EXTERNAL
IETF.draft-ietf-radext-deprecating-radius-09 — I-D.ietf-radext-deprecating-radius EXTERNAL
CA/Browser Forum, "CA/Browser Forum", <https://cabforum.org/>. EXTERNAL
IANA, "Extensible Authentication Protocol (EAP) Registry", <https://www.iana.org/assignments/eap-numbers>. EXTERNAL
IANA, ".ARPA Zone Management", <https://www.iana.org/domains/arpa>. EXTERNAL
IANA, "Special-Use Domain Names", <https://www.iana.org/assignments/special-use-domain-names>. EXTERNAL
Wi-Fi Alliance, "Passpoint", <https://www.wi-fi.org/discover-wi-fi/passpoint>. EXTERNAL
IETF RFC 2865 [Active*]
IETF RFC 5931 [Active*]
IETF RFC 6761 [Active*]
IETF RFC 7030 [Active*]
IETF RFC 7585 [Active*]
RFC8952 — RFC8952 EXTERNAL
IETF RFC 9190 [Active*]
IETF RFC 9810 [Active*]
IETF RFC 9930 [Active*]

Source Data (JSON)

Full registry record with provenance metadata. Open directly: /api/doc/RFC9965.json

Reference Tree

Explore all references and references to this document, as a navigable tree.

Open Reference Tree

Reference this Doc

Plain text (ISO 690 compliant)

Preview:

IETF RFC 9965, The eap.arpa. Domain and Extensible Authentication Protocol (EAP) Provisioning. Available at https://doi.org/10.17487/RFC9965

Snippet:

IETF RFC 9965, The eap.arpa. Domain and Extensible Authentication Protocol (EAP) Provisioning. Available at https://doi.org/10.17487/RFC9965

HTML (ISO 690 compliant)

Preview:

IETF RFC 9965, The eap.arpa. Domain and Extensible Authentication Protocol (EAP) Provisioning. Available at https://doi.org/10.17487/RFC9965

Snippet:

<span class="citation"><cite>IETF RFC 9965</cite>, The eap.arpa. Domain and Extensible Authentication Protocol (EAP) Provisioning. Available at <a href="https://doi.org/10.17487/RFC9965" target="_blank" rel="noopener">https://doi.org/10.17487/RFC9965</a></span>

SMPTE's HTML Pub

Preview:

IETF RFC 9965, The eap.arpa. Domain and Extensible Authentication Protocol (EAP) Provisioning
doi: 10.17487/RFC9965
url: https://doi.org/10.17487/RFC9965

Snippet:

<li>
<cite id="bib-rfc9965">IETF RFC 9965</cite>, The eap.arpa. Domain and Extensible Authentication Protocol (EAP) Provisioning
<span class="doi">10.17487/RFC9965</span>
</li>