RFC 5056: On the Use of Channel Bindings to Secure Channels

The concept of channel binding allows applications to establish that the two end-points of a secure channel at one network layer are the same as at a higher…

Read RFC 5056 on the RFC Editor

Outgoing relationships (21 related RFCs)

Normative reference — RFC 2119: Key words for use in RFCs to Indicate Requirement Levels
Informative reference — RFC 4301: Security Architecture for the Internet Protocol
Informative reference — RFC 4303: IP Encapsulating Security Payload (ESP)
Informative reference — RFC 2401: Security Architecture for the Internet Protocol
Informative reference — RFC 2818: HTTP Over TLS
Informative reference — RFC 2434: Guidelines for Writing an IANA Considerations Section in RFCs
Informative reference — RFC 4302: IP Authentication Header
Informative reference — RFC 3748: Extensible Authentication Protocol (EAP)
Informative reference — RFC 4346: The Transport Layer Security (TLS) Protocol Version 1.1
Informative reference — RFC 4422: Simple Authentication and Security Layer (SASL)
Informative reference — RFC 4120: The Kerberos Network Authentication Service (V5)
Informative reference — RFC 2743: Generic Security Service Application Program Interface Version 2, Update 1
Informative reference — RFC 4251: The Secure Shell (SSH) Protocol Architecture
Informative reference — RFC 1964: The Kerberos Version 5 GSS-API Mechanism
Informative reference — RFC 3720: Internet Small Computer Systems Interface (iSCSI)
Informative reference — RFC 2203: RPCSEC_GSS Protocol Specification
Informative reference — RFC 2817: Upgrading to TLS Within HTTP/1.1
Informative reference — RFC 3530: Network File System (NFS) version 4 Protocol
Informative reference — RFC 2744: Generic Security Service API Version 2 : C-bindings
Informative reference — RFC 5046: Internet Small Computer System Interface (iSCSI) Extensions for Remote Direct Memory Access (RDMA)
Informative reference — RFC 4462: Generic Security Service Application Program Interface (GSS-API) Authentication and Key Exchange for the Secure Shell (SSH) Protocol

Incoming relationships (24 related RFCs)

Normatively referenced by — RFC 6120: Extensible Messaging and Presence Protocol (XMPP): Core
Normatively referenced by — RFC 5929: Channel Bindings for TLS
Normatively referenced by — RFC 5802: Salted Challenge Response Authentication Mechanism (SCRAM) SASL and GSS-API Mechanisms
Normatively referenced by — RFC 5801: Using Generic Security Service Application Program Interface (GSS-API) Mechanisms in Simple Authentication and Security Layer (SASL): The GS2 Mechanism Family
Normatively referenced by — RFC 5403: RPCSEC_GSS Version 2
Normatively referenced by — RFC 5666: Remote Direct Memory Access Transport for Remote Procedure Call
Normatively referenced by — RFC 7861: Remote Procedure Call (RPC) Security Version 3
Normatively referenced by — RFC 9258: Importing External Pre-Shared Keys (PSKs) for TLS 1.3
Normatively referenced by — RFC 8166: Remote Direct Memory Access Transport for Remote Procedure Call Version 1
Normatively referenced by — RFC 9266: Channel Bindings for TLS 1.3
Normatively referenced by — RFC 6595: A Simple Authentication and Security Layer (SASL) and GSS-API Mechanism for the Security Assertion Markup Language (SAML)
Normatively referenced by — RFC 6618: Mobile IPv6 Security Framework Using Transport Layer Security for Communication between the Mobile Node and Home Agent
Normatively referenced by — RFC 9289: Towards Remote Procedure Call Encryption by Default
Informatively referenced by — RFC 9640: YANG Data Types and Groupings for Cryptography
Informatively referenced by — RFC 9645: YANG Groupings for TLS Clients and TLS Servers
Informatively referenced by — RFC 5386: Better-Than-Nothing Security: An Unauthenticated Mode of IPsec
Informatively referenced by — RFC 6677: Channel-Binding Support for Extensible Authentication Protocol (EAP) Methods
Informatively referenced by — RFC 7831: Application Bridging for Federated Access Beyond Web (ABFAB) Architecture
Informatively referenced by — RFC 9140: Nimble Out-of-Band Authentication for EAP (EAP-NOOB)
Informatively referenced by — RFC 6331: Moving DIGEST-MD5 to Historic
Informatively referenced by — RFC 6287: OCRA: OATH Challenge-Response Algorithm
Informatively referenced by — RFC 6678: Requirements for a Tunnel-Based Extensible Authentication Protocol (EAP) Method
Informatively referenced by — RFC 6896: SCS: KoanLogic's Secure Cookie Sessions for HTTP
Informatively referenced by — RFC 8062: Anonymity Support for Kerberos