RFC 6896: SCS: KoanLogic's Secure Cookie Sessions for HTTP

This memo defines a generic URI and HTTP-header-friendly envelope for carrying symmetrically encrypted, authenticated, and origin-timestamped tokens. It also…

Read RFC 6896 on the RFC Editor

Outgoing relationships (13 related RFCs)

Normative reference — RFC 2119: Key words for use in RFCs to Indicate Requirement Levels
Normative reference — RFC 2104: HMAC: Keyed-Hashing for Message Authentication
Normative reference — RFC 2616: Hypertext Transfer Protocol -- HTTP/1.1
Normative reference — RFC 4086: Randomness Requirements for Security
Normative reference — RFC 4648: The Base16, Base32, and Base64 Data Encodings
Normative reference — RFC 5652: Cryptographic Message Syntax (CMS)
Normative reference — RFC 6265: HTTP State Management Mechanism
Normative reference — RFC 1951: DEFLATE Compressed Data Format Specification version 1.3
Normative reference — RFC 6194: Security Considerations for the SHA-0 and SHA-1 Message-Digest Algorithms
Informative reference — RFC 5246: The Transport Layer Security (TLS) Protocol Version 1.2
Informative reference — RFC 4301: Security Architecture for the Internet Protocol
Informative reference — RFC 5056: On the Use of Channel Bindings to Secure Channels
Informative reference — RFC 3740: The Multicast Group Security Architecture