RFC 7469: Public Key Pinning Extension for HTTP

This document defines a new HTTP header that allows web host operators to instruct user agents to remember ("pin") the hosts' cryptographic identities over a…

Read RFC 7469 on the RFC Editor

Outgoing relationships (16 related RFCs)

Normative reference — RFC 2119: Key words for use in RFCs to Indicate Requirement Levels
Normative reference — RFC 5246: The Transport Layer Security (TLS) Protocol Version 1.2
Normative reference — RFC 5234: Augmented BNF for Syntax Specifications: ABNF
Normative reference — RFC 3986: Uniform Resource Identifier (URI): Generic Syntax
Normative reference — RFC 5280: Internet X.509 Public Key Infrastructure Certificate and Certificate Revocation List (CRL) Profile
Normative reference — RFC 4648: The Base16, Base32, and Base64 Data Encodings
Normative reference — RFC 7230: Hypertext Transfer Protocol (HTTP/1.1): Message Syntax and Routing
Normative reference — RFC 3339: Date and Time on the Internet: Timestamps
Normative reference — RFC 6234: US Secure Hash Algorithms (SHA and SHA-based HMAC and HKDF)
Normative reference — RFC 7159: The JavaScript Object Notation (JSON) Data Interchange Format
Normative reference — RFC 6265: HTTP State Management Mechanism
Normative reference — RFC 7234: Hypertext Transfer Protocol (HTTP/1.1): Caching
Normative reference — RFC 7468: Textual Encodings of PKIX, PKCS, and CMS Structures
Normative reference — RFC 6797: HTTP Strict Transport Security (HSTS)
Informative reference — RFC 3546: Transport Layer Security (TLS) Extensions
Informative reference — RFC 6962: Certificate Transparency

Incoming relationships (11 related RFCs)

Normatively referenced by — RFC 7858: Specification for DNS over Transport Layer Security (TLS)
Normatively referenced by — RFC 8995: Bootstrapping Remote Secure Key Infrastructure (BRSKI)
Normatively referenced by — RFC 9932: Mutually Authenticating TLS in the Context of Federations
Informatively referenced by — RFC 7838: HTTP Alternative Services
Informatively referenced by — RFC 8310: Usage Profiles for DNS over TLS and DNS over DTLS
Informatively referenced by — RFC 8155: Traversal Using Relays around NAT (TURN) Server Auto Discovery
Informatively referenced by — RFC 8314: Cleartext Considered Obsolete: Use of Transport Layer Security (TLS) for Email Submission and Access
Informatively referenced by — RFC 7711: PKIX over Secure HTTP (POSH)
Informatively referenced by — RFC 9216: S/MIME Example Keys and Certificates
Informatively referenced by — RFC 7687: Report from the Strengthening the Internet (STRINT) Workshop
Informatively referenced by — RFC 8280: Research into Human Rights Protocol Considerations