RFC 9147: The Datagram Transport Layer Security (DTLS) Protocol Version 1.3

This document specifies version 1.3 of the Datagram Transport Layer Security (DTLS) protocol. DTLS 1.3 allows client/server applications to communicate over…

Read RFC 9147 on the RFC Editor

Outgoing relationships (29 related RFCs)

Obsoletes, Informative reference — RFC 6347: Datagram Transport Layer Security Version 1.2
Normative reference — RFC 2119: Key words for use in RFCs to Indicate Requirement Levels
Normative reference — RFC 8174: Ambiguity of Uppercase vs Lowercase in RFC 2119 Key Words
Normative reference — RFC 793: Transmission Control Protocol
Normative reference — RFC 8446: The Transport Layer Security (TLS) Protocol Version 1.3
Normative reference — RFC 768: User Datagram Protocol
Normative reference — RFC 1191: Path MTU discovery
Normative reference — RFC 4443: Internet Control Message Protocol (ICMPv6) for the Internet Protocol Version 6 (IPv6) Specification
Normative reference — RFC 4821: Packetization Layer Path MTU Discovery
Normative reference — RFC 6298: Computing TCP's Retransmission Timer
Normative reference — RFC 8439: ChaCha20 and Poly1305 for IETF Protocols
Informative reference — RFC 5246: The Transport Layer Security (TLS) Protocol Version 1.2
Informative reference — RFC 4303: IP Encapsulating Security Payload (ESP)
Informative reference — RFC 4960: Stream Control Transmission Protocol
Informative reference — RFC 4346: The Transport Layer Security (TLS) Protocol Version 1.1
Informative reference — RFC 6066: Transport Layer Security (TLS) Extensions: Extension Definitions
Informative reference — RFC 7525: Recommendations for Secure Use of Transport Layer Security (TLS) and Datagram Transport Layer Security (DTLS)
Informative reference — RFC 4340: Datagram Congestion Control Protocol (DCCP)
Informative reference — RFC 7296: Internet Key Exchange Protocol Version 2 (IKEv2)
Informative reference — RFC 8445: Interactive Connectivity Establishment (ICE): A Protocol for Network Address Translator (NAT) Traversal
Informative reference — RFC 5764: Datagram Transport Layer Security (DTLS) Extension to Establish Keys for the Secure Real-time Transport Protocol (SRTP)
Informative reference — RFC 4347: Datagram Transport Layer Security
Informative reference — RFC 8201: Path MTU Discovery for IP version 6
Informative reference — RFC 5763: Framework for Establishing a Secure Real-time Transport Protocol (SRTP) Security Context Using Datagram Transport Layer Security (DTLS)
Informative reference — RFC 2522: Photuris: Session-Key Management Protocol
Informative reference — RFC 7924: Transport Layer Security (TLS) Cached Information Extension
Informative reference — RFC 5238: Datagram Transport Layer Security (DTLS) over the Datagram Congestion Control Protocol (DCCP)
Informative reference — RFC 7983: Multiplexing Scheme Updates for Secure Real-time Transport Protocol (SRTP) Extension for Datagram Transport Layer Security (DTLS)
Informative reference — RFC 8879: TLS Certificate Compression

Incoming relationships (33 related RFCs)

Updated by, Normatively referenced by — RFC 9853: Return Routability Check for DTLS 1.2 and 1.3
Normatively referenced by — RFC 9325: Recommendations for Secure Use of Transport Layer Security (TLS) and Datagram Transport Layer Security (DTLS)
Normatively referenced by — RFC 9258: Importing External Pre-Shared Keys (PSKs) for TLS 1.3
Normatively referenced by — RFC 9202: Datagram Transport Layer Security (DTLS) Profile for Authentication and Authorization for Constrained Environments (ACE)
Normatively referenced by — RFC 9303: Locator/ID Separation Protocol Security (LISP-SEC)
Normatively referenced by — RFC 9482: Constrained Application Protocol (CoAP) Transfer for the Certificate Management Protocol
Normatively referenced by — RFC 9849: TLS Encrypted Client Hello
Normatively referenced by — RFC 9148: EST-coaps: Enrollment over Secure Transport with the Secure Constrained Application Protocol
Normatively referenced by — RFC 9149: TLS Ticket Requests
Normatively referenced by — RFC 9150: TLS 1.3 Authentication and Integrity-Only Cipher Suites
Normatively referenced by — RFC 9151: Commercial National Security Algorithm (CNSA) Suite Profile for TLS and DTLS 1.2 and 1.3
Normatively referenced by — RFC 9952: Application-Layer Protocol Negotiation (ALPN) ID for CoAP over DTLS
Normatively referenced by — RFC 9953: DNS over CoAP (DoC)
Normatively referenced by — RFC 9185: DTLS Tunnel between a Media Distributor and Key Distributor to Facilitate Key Exchange
Normatively referenced by — RFC 9261: Exported Authenticators in TLS
Normatively referenced by — RFC 9289: Towards Remote Procedure Call Encryption by Default
Normatively referenced by — RFC 9647: A YANG Data Model for Babel
Normatively referenced by — RFC 9761: Manufacturer Usage Description (MUD) for TLS and DTLS Profiles for Internet of Things (IoT) Devices
Normatively referenced by — RFC 9770: Notification of Revoked Access Tokens in the Authentication and Authorization for Constrained Environments (ACE) Framework
Informatively referenced by — RFC 9053: CBOR Object Signing and Encryption (COSE): Initial Algorithms
Informatively referenced by — RFC 9525: Service Identity in TLS
Informatively referenced by — RFC 9200: Authentication and Authorization for Constrained Environments Using the OAuth 2.0 Framework (ACE-OAuth)
Informatively referenced by — RFC 9331: The Explicit Congestion Notification (ECN) Protocol for Low Latency, Low Loss, and Scalable Throughput (L4S)
Informatively referenced by — RFC 9257: Guidance for External Pre-Shared Key (PSK) Usage in TLS
Informatively referenced by — RFC 9528: Ephemeral Diffie-Hellman Over COSE (EDHOC)
Informatively referenced by — RFC 9810: Internet X.509 Public Key Infrastructure -- Certificate Management Protocol (CMP)
Informatively referenced by — RFC 9203: The Object Security for Constrained RESTful Environments (OSCORE) Profile of the Authentication and Authorization for Constrained Environments (ACE) Framework
Informatively referenced by — RFC 9372: L-Band Digital Aeronautical Communications System (LDACS)
Informatively referenced by — RFC 9848: Bootstrapping TLS Encrypted ClientHello with DNS Service Bindings
Informatively referenced by — RFC 9868: Transport Options for UDP
Informatively referenced by — RFC 9223: Real-Time Transport Object Delivery over Unidirectional Transport (ROUTE)
Informatively referenced by — RFC 9456: Updates to the TLS Transport Model for SNMP
Informatively referenced by — RFC 9820: Authentication Service Based on the Extensible Authentication Protocol (EAP) for Use with the Constrained Application Protocol (CoAP)