RFC 7624: Confidentiality in the Face of Pervasive Surveillance: A Threat Model and Problem Statement

Since the initial revelations of pervasive surveillance in 2013, several classes of attacks on Internet communications have been discovered. In this document,…

Read RFC 7624 on the RFC Editor

Outgoing relationships (15 related RFCs)

Normative reference — RFC 6973: Privacy Considerations for Internet Protocols
Informative reference — RFC 3261: SIP: Session Initiation Protocol
Informative reference — RFC 5246: The Transport Layer Security (TLS) Protocol Version 1.2
Informative reference — RFC 1035: Domain names - implementation and specification
Informative reference — RFC 4303: IP Encapsulating Security Payload (ESP)
Informative reference — RFC 4033: DNS Security Introduction and Requirements
Informative reference — RFC 1918: Address Allocation for Private Internets
Informative reference — RFC 3501: INTERNET MESSAGE ACCESS PROTOCOL - VERSION 4rev1
Informative reference — RFC 5321: Simple Mail Transfer Protocol
Informative reference — RFC 4949: Internet Security Glossary, Version 2
Informative reference — RFC 7258: Pervasive Monitoring Is an Attack
Informative reference — RFC 7011: Specification of the IP Flow Information Export (IPFIX) Protocol for the Exchange of Flow Information
Informative reference — RFC 1939: Post Office Protocol - Version 3
Informative reference — RFC 3365: Strong Security Requirements for Internet Engineering Task Force Standard Protocols
Informative reference — RFC 6962: Certificate Transparency

Incoming relationships (10 related RFCs)

Normatively referenced by — RFC 8165: Design Considerations for Metadata Insertion
Informatively referenced by — RFC 7626: DNS Privacy Considerations
Informatively referenced by — RFC 8404: Effects of Pervasive Encryption on Operators
Informatively referenced by — RFC 9528: Ephemeral Diffie-Hellman Over COSE (EDHOC)
Informatively referenced by — RFC 8890: The Internet is for End Users
Informatively referenced by — RFC 7687: Report from the Strengthening the Internet (STRINT) Workshop
Informatively referenced by — RFC 8280: Research into Human Rights Protocol Considerations
Informatively referenced by — RFC 9091: Experimental Domain-Based Message Authentication, Reporting, and Conformance (DMARC) Extension for Public Suffix Domains
Informatively referenced by — RFC 8686: Application-Layer Traffic Optimization (ALTO) Cross-Domain Server Discovery
Informatively referenced by — RFC 9505: A Survey of Worldwide Censorship Techniques