RFC 7711: PKIX over Secure HTTP (POSH)

Experience has shown that it is difficult to deploy proper PKIX certificates for Transport Layer Security (TLS) in multi-tenanted environments. As a result,…

Read RFC 7711 on the RFC Editor

Outgoing relationships (22 related RFCs)

Normative reference — RFC 2119: Key words for use in RFCs to Indicate Requirement Levels
Normative reference — RFC 5246: The Transport Layer Security (TLS) Protocol Version 1.2
Normative reference — RFC 5280: Internet X.509 Public Key Infrastructure Certificate and Certificate Revocation List (CRL) Profile
Normative reference — RFC 4648: The Base16, Base32, and Base64 Data Encodings
Normative reference — RFC 2818: HTTP Over TLS
Normative reference — RFC 7230: Hypertext Transfer Protocol (HTTP/1.1): Message Syntax and Routing
Normative reference — RFC 6125: Representation and Verification of Domain-Based Application Service Identity within Internet Public Key Infrastructure Using X.509 (PKIX) Certificates in the Context of Transport Layer Security (TLS)
Normative reference — RFC 7525: Recommendations for Secure Use of Transport Layer Security (TLS) and Datagram Transport Layer Security (DTLS)
Normative reference — RFC 7231: Hypertext Transfer Protocol (HTTP/1.1): Semantics and Content
Normative reference — RFC 7159: The JavaScript Object Notation (JSON) Data Interchange Format
Normative reference — RFC 5785: Defining Well-Known Uniform Resource Identifiers (URIs)
Informative reference — RFC 5226: Guidelines for Writing an IANA Considerations Section in RFCs
Informative reference — RFC 4033: DNS Security Introduction and Requirements
Informative reference — RFC 2782: A DNS RR for specifying the location of services (DNS SRV)
Informative reference — RFC 6120: Extensible Messaging and Presence Protocol (XMPP): Core
Informative reference — RFC 6335: Internet Assigned Numbers Authority (IANA) Procedures for the Management of the Service Name and Transport Protocol Port Number Registry
Informative reference — RFC 6698: The DNS-Based Authentication of Named Entities (DANE) Transport Layer Security (TLS) Protocol: TLSA
Informative reference — RFC 6555: Happy Eyeballs: Success with Dual-Stack Hosts
Informative reference — RFC 7030: Enrollment over Secure Transport
Informative reference — RFC 7469: Public Key Pinning Extension for HTTP
Informative reference — RFC 6797: HTTP Strict Transport Security (HSTS)
Informative reference — RFC 7538: The Hypertext Transfer Protocol Status Code 308 (Permanent Redirect)

Incoming relationships (2 related RFCs)

Normatively referenced by — RFC 7712: Domain Name Associations (DNA) in the Extensible Messaging and Presence Protocol (XMPP)
Informatively referenced by — RFC 7817: Updated Transport Layer Security (TLS) Server Identity Check Procedure for Email-Related Protocols