RFC 9525: Service Identity in TLS

Many application technologies enable secure communication between two entities by means of Transport Layer Security (TLS) with Internet Public Key…

Read RFC 9525 on the RFC Editor

Outgoing relationships (39 related RFCs)

Obsoletes, Informative reference — RFC 6125: Representation and Verification of Domain-Based Application Service Identity within Internet Public Key Infrastructure Using X.509 (PKIX) Certificates in the Context of Transport Layer Security (TLS)
Normative reference — RFC 2119: Key words for use in RFCs to Indicate Requirement Levels
Normative reference — RFC 8174: Ambiguity of Uppercase vs Lowercase in RFC 2119 Key Words
Normative reference — RFC 3986: Uniform Resource Identifier (URI): Generic Syntax
Normative reference — RFC 5280: Internet X.509 Public Key Infrastructure Certificate and Certificate Revocation List (CRL) Profile
Normative reference — RFC 791: Internet Protocol
Normative reference — RFC 1034: Domain names - concepts and facilities
Normative reference — RFC 4291: IP Version 6 Addressing Architecture
Normative reference — RFC 2782: A DNS RR for specifying the location of services (DNS SRV)
Normative reference — RFC 5890: Internationalized Domain Names for Applications (IDNA): Definitions and Document Framework
Normative reference — RFC 5891: Internationalized Domain Names in Applications (IDNA): Protocol
Normative reference — RFC 4514: Lightweight Directory Access Protocol (LDAP): String Representation of Distinguished Names
Normative reference — RFC 9325: Recommendations for Secure Use of Transport Layer Security (TLS) and Datagram Transport Layer Security (DTLS)
Normative reference — RFC 4592: The Role of Wildcards in the Domain Name System
Normative reference — RFC 4985: Internet X.509 Public Key Infrastructure Subject Alternative Name for Expression of Service Name
Informative reference — RFC 3261: SIP: Session Initiation Protocol
Informative reference — RFC 5234: Augmented BNF for Syntax Specifications: ABNF
Informative reference — RFC 8446: The Transport Layer Security (TLS) Protocol Version 1.3
Informative reference — RFC 9000: QUIC: A UDP-Based Multiplexed and Secure Transport
Informative reference — RFC 4949: Internet Security Glossary, Version 2
Informative reference — RFC 6066: Transport Layer Security (TLS) Extensions: Extension Definitions
Informative reference — RFC 9110: HTTP Semantics
Informative reference — RFC 6120: Extensible Messaging and Presence Protocol (XMPP): Core
Informative reference — RFC 7858: Specification for DNS over Transport Layer Security (TLS)
Informative reference — RFC 9147: The Datagram Transport Layer Security (DTLS) Protocol Version 1.3
Informative reference — RFC 6698: The DNS-Based Authentication of Named Entities (DANE) Transport Layer Security (TLS) Protocol: TLSA
Informative reference — RFC 7301: Transport Layer Security (TLS) Application-Layer Protocol Negotiation Extension
Informative reference — RFC 3403: Dynamic Delegation Discovery System (DDDS) Part Three: The Domain Name System (DNS) Database
Informative reference — RFC 8555: Automatic Certificate Management Environment (ACME)
Informative reference — RFC 9001: Using TLS to Secure QUIC
Informative reference — RFC 4343: Domain Name System (DNS) Case Insensitivity Clarification
Informative reference — RFC 5922: Domain Certificates in the Session Initiation Protocol (SIP)
Informative reference — RFC 9460: Service Binding and Parameter Specification via the DNS (SVCB and HTTPS Resource Records)
Informative reference — RFC 5630: The Use of the SIPS URI Scheme in the Session Initiation Protocol (SIP)
Informative reference — RFC 8915: Network Time Security for the Network Time Protocol
Informative reference — RFC 6186: Use of SRV Records for Locating Email Submission/Access Services
Informative reference — RFC 9461: Service Binding Mapping for DNS Servers
Informative reference — RFC 8689: SMTP Require TLS Option
Informative reference — RFC 9345: Delegated Credentials for TLS and DTLS

Incoming relationships (7 related RFCs)

Normatively referenced by — RFC 9849: TLS Encrypted Client Hello
Normatively referenced by — RFC 9526: Simple Provisioning of Public Names for Residential Networks
Normatively referenced by — RFC 9887: Terminal Access Controller Access-Control System Plus (TACACS+) over TLS 1.3
Normatively referenced by — RFC 9704: Establishing Local DNS Authority in Validated Split-Horizon Environments
Normatively referenced by — RFC 9728: OAuth 2.0 Protected Resource Metadata
Normatively referenced by — RFC 9891: Automated Certificate Management Environment (ACME) Delay-Tolerant Networking (DTN) Node ID Validation Extension
Normatively referenced by — RFC 9918: Updates to Using the NETCONF Protocol over Transport Layer Security (TLS) with Mutual X.509 Authentication