RFC 8265: Preparation, Enforcement, and Comparison of Internationalized Strings Representing Usernames and Passwords

This document describes updated methods for handling Unicode strings representing usernames and passwords. The previous approach was known as SASLprep (RFC…

Read RFC 8265 on the RFC Editor

Outgoing relationships (20 related RFCs)

Obsoletes, Informative reference — RFC 7613: Preparation, Enforcement, and Comparison of Internationalized Strings Representing Usernames and Passwords
Normative reference — RFC 2119: Key words for use in RFCs to Indicate Requirement Levels
Normative reference — RFC 5234: Augmented BNF for Syntax Specifications: ABNF
Normative reference — RFC 3629: UTF-8, a transformation format of ISO 10646
Normative reference — RFC 5890: Internationalized Domain Names for Applications (IDNA): Definitions and Document Framework
Normative reference — RFC 6365: Terminology Used in Internationalization in the IETF
Informative reference — RFC 3501: INTERNET MESSAGE ACCESS PROTOCOL - VERSION 4rev1
Informative reference — RFC 20: ASCII format for network interchange
Informative reference — RFC 3454: Preparation of Internationalized Strings ("stringprep")
Informative reference — RFC 4422: Simple Authentication and Security Layer (SASL)
Informative reference — RFC 6120: Extensible Messaging and Presence Protocol (XMPP): Core
Informative reference — RFC 4013: SASLprep: Stringprep Profile for User Names and Passwords
Informative reference — RFC 5893: Right-to-Left Scripts for Internationalized Domain Names for Applications (IDNA)
Informative reference — RFC 7616: HTTP Digest Access Authentication
Informative reference — RFC 4616: The PLAIN Simple Authentication and Security Layer (SASL) Mechanism
Informative reference — RFC 7542: The Network Access Identifier
Informative reference — RFC 5802: Salted Challenge Response Authentication Mechanism (SCRAM) SASL and GSS-API Mechanisms
Informative reference — RFC 7617: The 'Basic' HTTP Authentication Scheme
Informative reference — RFC 6943: Issues in Identifier Comparison for Security Purposes
Informative reference — RFC 7622: Extensible Messaging and Presence Protocol (XMPP): Address Format

Incoming relationships (7 related RFCs)

Normatively referenced by — RFC 8489: Session Traversal Utilities for NAT (STUN)
Normatively referenced by — RFC 8907: The Terminal Access Controller Access-Control System Plus (TACACS+) Protocol
Normatively referenced by — RFC 9813: Operational Considerations for Using TLS Pre-Shared Keys (TLS-PSKs) with RADIUS
Normatively referenced by — RFC 9383: SPAKE2+, an Augmented Password-Authenticated Key Exchange (PAKE) Protocol
Informatively referenced by — RFC 8264: PRECIS Framework: Preparation, Enforcement, and Comparison of Internationalized Strings in Application Protocols
Informatively referenced by — RFC 8807: Login Security Extension for the Extensible Provisioning Protocol (EPP)
Informatively referenced by — RFC 9382: SPAKE2, a Password-Authenticated Key Exchange