RFC 6066: Transport Layer Security (TLS) Extensions: Extension Definitions

This document provides specifications for existing TLS extensions. It is a companion document for RFC 5246, "The Transport Layer Security (TLS) Protocol…

Read RFC 6066 on the RFC Editor

Outgoing relationships (11 related RFCs)

Obsoletes, Informative reference — RFC 4366: Transport Layer Security (TLS) Extensions
Normative reference — RFC 2119: Key words for use in RFCs to Indicate Requirement Levels
Normative reference — RFC 5246: The Transport Layer Security (TLS) Protocol Version 1.2
Normative reference — RFC 3986: Uniform Resource Identifier (URI): Generic Syntax
Normative reference — RFC 5280: Internet X.509 Public Key Infrastructure Certificate and Certificate Revocation List (CRL) Profile
Normative reference — RFC 2104: HMAC: Keyed-Hashing for Message Authentication
Normative reference — RFC 2616: Hypertext Transfer Protocol -- HTTP/1.1
Normative reference — RFC 5890: Internationalized Domain Names for Applications (IDNA): Definitions and Document Framework
Normative reference — RFC 2560: X.509 Internet Public Key Infrastructure Online Certificate Status Protocol - OCSP
Normative reference — RFC 2585: Internet X.509 Public Key Infrastructure Operational Protocols: FTP and HTTP
Informative reference — RFC 2712: Addition of Kerberos Cipher Suites to Transport Layer Security (TLS)

Incoming relationships (62 related RFCs)

Showing 50 of 62 related RFCs.

Updated by — RFC 8446: The Transport Layer Security (TLS) Protocol Version 1.3
Updated by, Normatively referenced by — RFC 9325: Recommendations for Secure Use of Transport Layer Security (TLS) and Datagram Transport Layer Security (DTLS)
Updated by — RFC 9846: The Transport Layer Security (TLS) Protocol Version 1.3
Updated by — RFC 8449: Record Size Limit Extension for TLS
Normatively referenced by — RFC 7252: The Constrained Application Protocol (CoAP)
Normatively referenced by — RFC 7540: Hypertext Transfer Protocol Version 2 (HTTP/2)
Normatively referenced by — RFC 6614: Transport Layer Security (TLS) Encryption for RADIUS
Normatively referenced by — RFC 7030: Enrollment over Secure Transport
Normatively referenced by — RFC 9460: Service Binding and Parameter Specification via the DNS (SVCB and HTTPS Resource Records)
Normatively referenced by — RFC 9132: Distributed Denial-of-Service Open Threat Signaling (DOTS) Signal Channel Specification
Normatively referenced by — RFC 7838: HTTP Alternative Services
Normatively referenced by — RFC 8323: CoAP (Constrained Application Protocol) over TCP, TLS, and WebSockets
Normatively referenced by — RFC 6520: Transport Layer Security (TLS) and Datagram Transport Layer Security (DTLS) Heartbeat Extension
Normatively referenced by — RFC 6186: Use of SRV Records for Locating Email Submission/Access Services
Normatively referenced by — RFC 6091: Using OpenPGP Keys for Transport Layer Security (TLS) Authentication
Normatively referenced by — RFC 6961: The Transport Layer Security (TLS) Multiple Certificate Status Request Extension
Normatively referenced by — RFC 7671: The DNS-Based Authentication of Named Entities (DANE) Protocol: Updates and Operational Guidance
Normatively referenced by — RFC 7672: SMTP Security via Opportunistic DNS-Based Authentication of Named Entities (DANE) Transport Layer Security (TLS)
Normatively referenced by — RFC 8765: DNS Push Notifications
Normatively referenced by — RFC 9190: EAP-TLS 1.3: Using the Extensible Authentication Protocol with TLS 1.3
Normatively referenced by — RFC 6655: AES-CCM Cipher Suites for Transport Layer Security (TLS)
Normatively referenced by — RFC 7673: Using DNS-Based Authentication of Named Entities (DANE) TLSA Records with SRV Records
Normatively referenced by — RFC 8738: Automated Certificate Management Environment (ACME) IP Identifier Validation Extension
Normatively referenced by — RFC 8782: Distributed Denial-of-Service Open Threat Signaling (DOTS) Signal Channel Specification
Normatively referenced by — RFC 9174: Delay-Tolerant Networking TCP Convergence-Layer Protocol Version 4
Normatively referenced by — RFC 7251: AES-CCM Elliptic Curve Cryptography (ECC) Cipher Suites for TLS
Normatively referenced by — RFC 7633: X.509v3 Transport Layer Security (TLS) Feature Extension
Normatively referenced by — RFC 8737: Automated Certificate Management Environment (ACME) TLS Application-Layer Protocol Negotiation (ALPN) Challenge Extension
Normatively referenced by — RFC 7817: Updated Transport Layer Security (TLS) Server Identity Check Procedure for Email-Related Protocols
Normatively referenced by — RFC 8336: The ORIGIN HTTP/2 Frame
Normatively referenced by — RFC 8908: Captive Portal API
Normatively referenced by — RFC 9887: Terminal Access Controller Access-Control System Plus (TACACS+) over TLS 1.3
Normatively referenced by — RFC 7151: File Transfer Protocol HOST Command for Virtual Hosts
Normatively referenced by — RFC 9102: TLS DNSSEC Chain Extension
Normatively referenced by — RFC 9261: Exported Authenticators in TLS
Normatively referenced by — RFC 9950: A YANG Data Model for Terminal Access Controller Access-Control System Plus (TACACS+)
Informatively referenced by — RFC 6125: Representation and Verification of Domain-Based Application Service Identity within Internet Public Key Infrastructure Using X.509 (PKIX) Certificates in the Context of Transport Layer Security (TLS)
Informatively referenced by — RFC 6120: Extensible Messaging and Presence Protocol (XMPP): Core
Informatively referenced by — RFC 9147: The Datagram Transport Layer Security (DTLS) Protocol Version 1.3
Informatively referenced by — RFC 6698: The DNS-Based Authentication of Named Entities (DANE) Transport Layer Security (TLS) Protocol: TLSA
Informatively referenced by — RFC 8094: DNS over Datagram Transport Layer Security (DTLS)
Informatively referenced by — RFC 6797: HTTP Strict Transport Security (HSTS)
Informatively referenced by — RFC 6943: Issues in Identifier Comparison for Security Purposes
Informatively referenced by — RFC 6962: Certificate Transparency
Informatively referenced by — RFC 9525: Service Identity in TLS
Informatively referenced by — RFC 8705: OAuth 2.0 Mutual-TLS Client Authentication and Certificate-Bound Access Tokens
Informatively referenced by — RFC 7590: Use of Transport Layer Security (TLS) in the Extensible Messaging and Presence Protocol (XMPP)
Informatively referenced by — RFC 9257: Guidance for External Pre-Shared Key (PSK) Usage in TLS
Informatively referenced by — RFC 7605: Recommendations on Using Assigned Transport Port Numbers
Informatively referenced by — RFC 8314: Cleartext Considered Obsolete: Use of Transport Layer Security (TLS) for Email Submission and Access