RFC 9325: Recommendations for Secure Use of Transport Layer Security (TLS) and Datagram Transport Layer Security (DTLS)

Transport Layer Security (TLS) and Datagram Transport Layer Security (DTLS) are used to protect data exchanged over a wide range of application protocols and…

Read RFC 9325 on the RFC Editor

Outgoing relationships (58 related RFCs)

Showing 50 of 58 related RFCs.

Updates, Normative reference — RFC 6066: Transport Layer Security (TLS) Extensions: Extension Definitions
Updates, Normative reference — RFC 5288: AES Galois Counter Mode (GCM) Cipher Suites for TLS
Obsoletes, Informative reference — RFC 7525: Recommendations for Secure Use of Transport Layer Security (TLS) and Datagram Transport Layer Security (DTLS)
Normative reference — RFC 2119: Key words for use in RFCs to Indicate Requirement Levels
Normative reference — RFC 8174: Ambiguity of Uppercase vs Lowercase in RFC 2119 Key Words
Normative reference — RFC 5246: The Transport Layer Security (TLS) Protocol Version 1.2
Normative reference — RFC 8446: The Transport Layer Security (TLS) Protocol Version 1.3
Normative reference — RFC 6347: Datagram Transport Layer Security Version 1.2
Normative reference — RFC 6125: Representation and Verification of Domain-Based Application Service Identity within Internet Public Key Infrastructure Using X.509 (PKIX) Certificates in the Context of Transport Layer Security (TLS)
Normative reference — RFC 7748: Elliptic Curves for Security
Normative reference — RFC 9147: The Datagram Transport Layer Security (DTLS) Protocol Version 1.3
Normative reference — RFC 7301: Transport Layer Security (TLS) Application-Layer Protocol Negotiation Extension
Normative reference — RFC 3766: Determining Strengths For Public Keys Used For Exchanging Symmetric Keys
Normative reference — RFC 6979: Deterministic Usage of the Digital Signature Algorithm (DSA) and Elliptic Curve Digital Signature Algorithm (ECDSA)
Normative reference — RFC 8422: Elliptic Curve Cryptography (ECC) Cipher Suites for Transport Layer Security (TLS) Versions 1.2 and Earlier
Normative reference — RFC 5746: Transport Layer Security (TLS) Renegotiation Indication Extension
Normative reference — RFC 7627: Transport Layer Security (TLS) Session Hash and Extended Master Secret Extension
Normative reference — RFC 6176: Prohibiting Secure Sockets Layer (SSL) Version 2.0
Normative reference — RFC 7366: Encrypt-then-MAC for Transport Layer Security (TLS) and Datagram Transport Layer Security (DTLS)
Normative reference — RFC 7465: Prohibiting RC4 Cipher Suites
Normative reference — RFC 8996: Deprecating TLS 1.0 and TLS 1.1
Normative reference — RFC 9155: Deprecating MD5 and SHA-1 Signature Hashes in TLS 1.2 and DTLS 1.2
Informative reference — RFC 3261: SIP: Session Initiation Protocol
Informative reference — RFC 5280: Internet X.509 Public Key Infrastructure Certificate and Certificate Revocation List (CRL) Profile
Informative reference — RFC 2026: The Internet Standards Process -- Revision 3
Informative reference — RFC 2246: The TLS Protocol Version 1.0
Informative reference — RFC 9000: QUIC: A UDP-Based Multiplexed and Secure Transport
Informative reference — RFC 4346: The Transport Layer Security (TLS) Protocol Version 1.1
Informative reference — RFC 5321: Simple Mail Transfer Protocol
Informative reference — RFC 4949: Internet Security Glossary, Version 2
Informative reference — RFC 6120: Extensible Messaging and Presence Protocol (XMPP): Core
Informative reference — RFC 7228: Terminology for Constrained-Node Networks
Informative reference — RFC 5116: An Interface and Algorithms for Authenticated Encryption
Informative reference — RFC 6698: The DNS-Based Authentication of Named Entities (DANE) Transport Layer Security (TLS) Protocol: TLSA
Informative reference — RFC 5077: Transport Layer Security (TLS) Session Resumption without Server-Side State
Informative reference — RFC 3602: The AES-CBC Cipher Algorithm and Its Use with IPsec
Informative reference — RFC 4347: Datagram Transport Layer Security
Informative reference — RFC 6960: X.509 Internet Public Key Infrastructure Online Certificate Status Protocol - OCSP
Informative reference — RFC 7435: Opportunistic Security: Some Protection Most of the Time
Informative reference — RFC 9001: Using TLS to Secure QUIC
Informative reference — RFC 7457: Summarizing Known Attacks on Transport Layer Security (TLS) and Datagram TLS (DTLS)
Informative reference — RFC 7924: Transport Layer Security (TLS) Cached Information Extension
Informative reference — RFC 6797: HTTP Strict Transport Security (HSTS)
Informative reference — RFC 7925: Transport Layer Security (TLS) / Datagram Transport Layer Security (DTLS) Profiles for the Internet of Things
Informative reference — RFC 9162: Certificate Transparency Version 2.0
Informative reference — RFC 9051: Internet Message Access Protocol (IMAP) - Version 4rev2
Informative reference — RFC 6101: The Secure Sockets Layer (SSL) Protocol Version 3.0
Informative reference — RFC 8879: TLS Certificate Compression
Informative reference — RFC 6961: The Transport Layer Security (TLS) Multiple Certificate Status Request Extension
Informative reference — RFC 7507: TLS Fallback Signaling Cipher Suite Value (SCSV) for Preventing Protocol Downgrade Attacks

Incoming relationships (16 related RFCs)

Updated by — RFC 9852: New Protocols Using TLS Must Require TLS 1.3
Updated by — RFC 10015: Deprecating Obsolete Key Exchange Methods in TLS 1.2 and DTLS 1.2
Normatively referenced by — RFC 9525: Service Identity in TLS
Normatively referenced by — RFC 9483: Lightweight Certificate Management Protocol (CMP) Profile
Normatively referenced by — RFC 9560: Federated Authentication for the Registration Data Access Protocol (RDAP) Using OpenID Connect
Normatively referenced by — RFC 9813: Operational Considerations for Using TLS Pre-Shared Keys (TLS-PSKs) with RADIUS
Normatively referenced by — RFC 9862: Path Computation Element Communication Protocol (PCEP) Extensions for Segment Routing (SR) Policy Candidate Paths
Normatively referenced by — RFC 9916: Updates to the Usage of TLS to Provide a Secure Transport for the Path Computation Element Communication Protocol (PCEP)
Normatively referenced by — RFC 9488: Local Protection Enforcement in the Path Computation Element Communication Protocol (PCEP)
Normatively referenced by — RFC 9701: JSON Web Token (JWT) Response for OAuth Token Introspection
Normatively referenced by — RFC 9863: Path Computation Element Protocol (PCEP) Extension for Color
Normatively referenced by — RFC 9918: Updates to Using the NETCONF Protocol over Transport Layer Security (TLS) with Mutual X.509 Authentication
Informatively referenced by — RFC 9753: Extension for Stateful PCE to Allow Optional Processing of Path Computation Element Communication Protocol (PCEP) Objects
Informatively referenced by — RFC 9456: Updates to the TLS Transport Model for SNMP
Informatively referenced by — RFC 9761: Manufacturer Usage Description (MUD) for TLS and DTLS Profiles for Internet of Things (IoT) Devices
Informatively referenced by — RFC 9933: Carrying SR-Algorithm in Path Computation Element Communication Protocol (PCEP)