RFC 8224: Authenticated Identity Management in the Session Initiation Protocol (SIP)

The baseline security mechanisms in the Session Initiation Protocol (SIP) are inadequate for cryptographically assuring the identity of the end users that…

Read RFC 8224 on the RFC Editor

Outgoing relationships (26 related RFCs)

Obsoletes, Informative reference — RFC 4474: Enhancements for Authenticated Identity Management in the Session Initiation Protocol (SIP)
Normative reference — RFC 2119: Key words for use in RFCs to Indicate Requirement Levels
Normative reference — RFC 3261: SIP: Session Initiation Protocol
Normative reference — RFC 5234: Augmented BNF for Syntax Specifications: ABNF
Normative reference — RFC 3986: Uniform Resource Identifier (URI): Generic Syntax
Normative reference — RFC 5280: Internet X.509 Public Key Infrastructure Certificate and Certificate Revocation List (CRL) Profile
Normative reference — RFC 3966: The tel URI for Telephone Numbers
Normative reference — RFC 3263: Session Initiation Protocol (SIP): Locating SIP Servers
Normative reference — RFC 8225: PASSporT: Personal Assertion Token
Normative reference — RFC 5922: Domain Certificates in the Session Initiation Protocol (SIP)
Informative reference — RFC 8259: The JavaScript Object Notation (JSON) Data Interchange Format
Informative reference — RFC 7519: JSON Web Token (JWT)
Informative reference — RFC 6973: Privacy Considerations for Internet Protocols
Informative reference — RFC 7515: JSON Web Signature (JWS)
Informative reference — RFC 6698: The DNS-Based Authentication of Named Entities (DANE) Transport Layer Security (TLS) Protocol: TLSA
Informative reference — RFC 3325: Private Extensions to the Session Initiation Protocol (SIP) for Asserted Identity within Trusted Networks
Informative reference — RFC 3323: A Privacy Mechanism for the Session Initiation Protocol (SIP)
Informative reference — RFC 2585: Internet X.509 Public Key Infrastructure Operational Protocols: FTP and HTTP
Informative reference — RFC 5763: Framework for Establishing a Secure Real-time Transport Protocol (SRTP) Security Context Using Datagram Transport Layer Security (DTLS)
Informative reference — RFC 7340: Secure Telephone Identity Problem Statement and Requirements
Informative reference — RFC 8226: Secure Telephone Identity Credentials: Certificates
Informative reference — RFC 4916: Connected Identity in the Session Initiation Protocol (SIP)
Informative reference — RFC 3893: Session Initiation Protocol (SIP) Authenticated Identity Body (AIB) Format
Informative reference — RFC 5393: Addressing an Amplification Vulnerability in Session Initiation Protocol (SIP) Forking Proxies
Informative reference — RFC 7375: Secure Telephone Identity Threat Model
Informative reference — RFC 4501: Domain Name System Uniform Resource Identifiers

Incoming relationships (14 related RFCs)

Updated by — RFC 8946: Personal Assertion Token (PASSporT) Extension for Diverted Calls
Normatively referenced by — RFC 8226: Secure Telephone Identity Credentials: Certificates
Normatively referenced by — RFC 8844: Unknown Key-Share Attacks on Uses of TLS with the Session Description Protocol (SDP)
Normatively referenced by — RFC 9060: Secure Telephone Identity Revisited (STIR) Certificate Delegation
Normatively referenced by — RFC 8862: Best Practices for Securing RTP Media Signaled with SIP
Normatively referenced by — RFC 9475: Messaging Use Cases and Extensions for Secure Telephone Identity Revisited (STIR)
Normatively referenced by — RFC 9410: Handling of Identity Header Errors for Secure Telephone Identity Revisited (STIR)
Normatively referenced by — RFC 9795: Personal Assertion Token (PASSporT) Extension for Rich Call Data
Normatively referenced by — RFC 9970: Connected Identity for Secure Telephone Identity Revisited (STIR)
Informatively referenced by — RFC 8827: WebRTC Security Architecture
Informatively referenced by — RFC 8842: Session Description Protocol (SDP) Offer/Answer Considerations for Datagram Transport Layer Security (DTLS) and Transport Layer Security (TLS)
Informatively referenced by — RFC 8876: Non-interactive Emergency Calls
Informatively referenced by — RFC 8688: A Session Initiation Protocol (SIP) Response Code for Rejected Calls
Informatively referenced by — RFC 9448: TNAuthList Profile of Automated Certificate Management Environment (ACME) Authority Token