RFC 7258: Pervasive Monitoring Is an Attack

Pervasive monitoring is a technical attack that should be mitigated in the design of IETF protocols, where possible.

Read RFC 7258 on the RFC Editor

Incoming relationships (44 related RFCs)

Normatively referenced by — RFC 8226: Secure Telephone Identity Credentials: Certificates
Normatively referenced by — RFC 7626: DNS Privacy Considerations
Normatively referenced by — RFC 7824: Privacy Considerations for DHCPv6
Normatively referenced by — RFC 7478: Web Real-Time Communication Use Cases and Requirements
Normatively referenced by — RFC 7819: Privacy Considerations for DHCP
Normatively referenced by — RFC 8165: Design Considerations for Metadata Insertion
Normatively referenced by — RFC 9076: DNS Privacy Considerations
Normatively referenced by — RFC 9224: Finding the Authoritative Registration Data Access Protocol (RDAP) Service
Normatively referenced by — RFC 8862: Best Practices for Securing RTP Media Signaled with SIP
Normatively referenced by — RFC 8241: Interface to the Routing System (I2RS) Security-Related Requirements
Normatively referenced by — RFC 8894: Simple Certificate Enrolment Protocol
Informatively referenced by — RFC 7858: Specification for DNS over Transport Layer Security (TLS)
Informatively referenced by — RFC 7435: Opportunistic Security: Some Protection Most of the Time
Informatively referenced by — RFC 7457: Summarizing Known Attacks on Transport Layer Security (TLS) and Datagram TLS (DTLS)
Informatively referenced by — RFC 7624: Confidentiality in the Face of Pervasive Surveillance: A Threat Model and Problem Statement
Informatively referenced by — RFC 7594: A Framework for Large-Scale Measurement of Broadband Performance (LMAP)
Informatively referenced by — RFC 7835: Locator/ID Separation Protocol (LISP) Threat Analysis
Informatively referenced by — RFC 7484: Finding the Authoritative Registration Data (RDAP) Service
Informatively referenced by — RFC 7619: The NULL Authentication Method in the Internet Key Exchange Protocol Version 2 (IKEv2)
Informatively referenced by — RFC 8404: Effects of Pervasive Encryption on Operators
Informatively referenced by — RFC 8995: Bootstrapping Remote Secure Key Infrastructure (BRSKI)
Informatively referenced by — RFC 7590: Use of Transport Layer Security (TLS) in the Extensible Messaging and Presence Protocol (XMPP)
Informatively referenced by — RFC 8881: Network File System (NFS) Version 4 Minor Version 1 Protocol
Informatively referenced by — RFC 9528: Ephemeral Diffie-Hellman Over COSE (EDHOC)
Informatively referenced by — RFC 8744: Issues and Requirements for Server Name Identification (SNI) Encryption in TLS
Informatively referenced by — RFC 9205: Building Protocols with HTTP
Informatively referenced by — RFC 8162: Using Secure DNS to Associate Certificates with Domain Names for S/MIME
Informatively referenced by — RFC 8164: Opportunistic Security for HTTP/2
Informatively referenced by — RFC 8372: MPLS Flow Identification Considerations
Informatively referenced by — RFC 8890: The Internet is for End Users
Informatively referenced by — RFC 8957: Synonymous Flow Label Framework
Informatively referenced by — RFC 7687: Report from the Strengthening the Internet (STRINT) Workshop
Informatively referenced by — RFC 7814: Virtual Subnet: A BGP/MPLS IP VPN-Based Subnet Extension Solution
Informatively referenced by — RFC 8143: Using Transport Layer Security (TLS) with Network News Transfer Protocol (NNTP)
Informatively referenced by — RFC 8280: Research into Human Rights Protocol Considerations
Informatively referenced by — RFC 9317: Operational Considerations for Streaming Media
Informatively referenced by — RFC 7834: Locator/ID Separation Protocol (LISP) Impact
Informatively referenced by — RFC 7974: An Experimental TCP Option for Host Identification
Informatively referenced by — RFC 9048: Improved Extensible Authentication Protocol Method for 3GPP Mobile Network Authentication and Key Agreement (EAP-AKA')
Informatively referenced by — RFC 9289: Towards Remote Procedure Call Encryption by Default
Informatively referenced by — RFC 9414: Unfortunate History of Transient Numeric Identifiers
Informatively referenced by — RFC 9415: On the Generation of Transient Numeric Identifiers
Informatively referenced by — RFC 9416: Security Considerations for Transient Numeric Identifiers Employed in Network Protocols
Informatively referenced by — RFC 9583: Application Scenarios for the Quantum Internet