RFC 9729: The Concealed HTTP Authentication Scheme

Most HTTP authentication schemes are probeable in the sense that it is possible for an unauthenticated client to probe whether an origin serves resources that…

Read RFC 9729 on the RFC Editor

Outgoing relationships (19 related RFCs)

Normative reference — RFC 2119: Key words for use in RFCs to Indicate Requirement Levels
Normative reference — RFC 8174: Ambiguity of Uppercase vs Lowercase in RFC 2119 Key Words
Normative reference — RFC 5234: Augmented BNF for Syntax Specifications: ABNF
Normative reference — RFC 3986: Uniform Resource Identifier (URI): Generic Syntax
Normative reference — RFC 8446: The Transport Layer Security (TLS) Protocol Version 1.3
Normative reference — RFC 4648: The Base16, Base32, and Base64 Data Encodings
Normative reference — RFC 9000: QUIC: A UDP-Based Multiplexed and Secure Transport
Normative reference — RFC 9110: HTTP Semantics
Normative reference — RFC 8792: Handling Long Lines in Content of Internet-Drafts and RFCs
Normative reference — RFC 8017: PKCS #1: RSA Cryptography Specifications Version 2.2
Normative reference — RFC 8032: Edwards-Curve Digital Signature Algorithm (EdDSA)
Normative reference — RFC 5705: Keying Material Exporters for Transport Layer Security (TLS)
Normative reference — RFC 7627: Transport Layer Security (TLS) Session Hash and Extended Master Secret Extension
Normative reference — RFC 9651: Structured Field Values for HTTP
Informative reference — RFC 9113: HTTP/2
Informative reference — RFC 9114: HTTP/3
Informative reference — RFC 9001: Using TLS to Secure QUIC
Informative reference — RFC 8410: Algorithm Identifiers for Ed25519, Ed448, X25519, and X448 for Use in the Internet X.509 Public Key Infrastructure
Informative reference — RFC 7486: HTTP Origin-Bound Authentication (HOBA)