RFC 7817: Updated Transport Layer Security (TLS) Server Identity Check Procedure for Email-Related Protocols

This document describes the Transport Layer Security (TLS) server identity verification procedure for SMTP Submission, IMAP, POP, and ManageSieve clients. It…

Read RFC 7817 on the RFC Editor

Outgoing relationships (19 related RFCs)

Updates, Normative reference — RFC 3501: INTERNET MESSAGE ACCESS PROTOCOL - VERSION 4rev1
Updates, Normative reference — RFC 3207: SMTP Service Extension for Secure SMTP over Transport Layer Security
Updates, Informative reference — RFC 2595: Using TLS with IMAP, POP3 and ACAP
Updates, Normative reference — RFC 5804: A Protocol for Remotely Managing Sieve Scripts
Normative reference — RFC 2119: Key words for use in RFCs to Indicate Requirement Levels
Normative reference — RFC 5280: Internet X.509 Public Key Infrastructure Certificate and Certificate Revocation List (CRL) Profile
Normative reference — RFC 6125: Representation and Verification of Domain-Based Application Service Identity within Internet Public Key Infrastructure Using X.509 (PKIX) Certificates in the Context of Transport Layer Security (TLS)
Normative reference — RFC 6066: Transport Layer Security (TLS) Extensions: Extension Definitions
Normative reference — RFC 1939: Post Office Protocol - Version 3
Normative reference — RFC 6409: Message Submission for Mail
Normative reference — RFC 4985: Internet X.509 Public Key Infrastructure Subject Alternative Name for Expression of Service Name
Normative reference — RFC 6186: Use of SRV Records for Locating Email Submission/Access Services
Informative reference — RFC 5234: Augmented BNF for Syntax Specifications: ABNF
Informative reference — RFC 3986: Uniform Resource Identifier (URI): Generic Syntax
Informative reference — RFC 4033: DNS Security Introduction and Requirements
Informative reference — RFC 4034: Resource Records for the DNS Security Extensions
Informative reference — RFC 4035: Protocol Modifications for the DNS Security Extensions
Informative reference — RFC 6698: The DNS-Based Authentication of Named Entities (DANE) Transport Layer Security (TLS) Protocol: TLSA
Informative reference — RFC 7711: PKIX over Secure HTTP (POSH)

Incoming relationships (1 related RFC)

Normatively referenced by — RFC 8314: Cleartext Considered Obsolete: Use of Transport Layer Security (TLS) for Email Submission and Access