RFC 6331: Moving DIGEST-MD5 to Historic

This memo describes problems with the DIGEST-MD5 Simple Authentication and Security Layer (SASL) mechanism as specified in RFC 2831. It marks DIGEST-MD5 as…

Read RFC 6331 on the RFC Editor

Outgoing relationships (13 related RFCs)

Obsoletes, Normative reference — RFC 2831: Using Digest Authentication as a SASL Mechanism
Normative reference — RFC 2617: HTTP Authentication: Basic and Digest Access Authentication
Informative reference — RFC 5234: Augmented BNF for Syntax Specifications: ABNF
Informative reference — RFC 3629: UTF-8, a transformation format of ISO 10646
Informative reference — RFC 822: STANDARD FOR THE FORMAT OF ARPA INTERNET TEXT MESSAGES
Informative reference — RFC 4422: Simple Authentication and Security Layer (SASL)
Informative reference — RFC 6151: Updated Security Considerations for the MD5 Message-Digest and the HMAC-MD5 Algorithms
Informative reference — RFC 4013: SASLprep: Stringprep Profile for User Names and Passwords
Informative reference — RFC 5056: On the Use of Channel Bindings to Secure Channels
Informative reference — RFC 3766: Determining Strengths For Public Keys Used For Exchanging Symmetric Keys
Informative reference — RFC 2195: IMAP/POP AUTHorize Extension for Simple Challenge/Response
Informative reference — RFC 5802: Salted Challenge Response Authentication Mechanism (SCRAM) SASL and GSS-API Mechanisms
Informative reference — RFC 6229: Test Vectors for the Stream Cipher RC4

Incoming relationships (1 related RFC)

Informatively referenced by — RFC 7804: Salted Challenge Response HTTP Authentication Mechanism