RFC 7627: Transport Layer Security (TLS) Session Hash and Extended Master Secret Extension

The Transport Layer Security (TLS) master secret is not cryptographically bound to important session parameters such as the server certificate. Consequently,…

Read RFC 7627 on the RFC Editor

Outgoing relationships (11 related RFCs)

Updates, Normative reference — RFC 5246: The Transport Layer Security (TLS) Protocol Version 1.2
Normative reference — RFC 2119: Key words for use in RFCs to Indicate Requirement Levels
Informative reference — RFC 6347: Datagram Transport Layer Security Version 1.2
Informative reference — RFC 4251: The Secure Shell (SSH) Protocol Architecture
Informative reference — RFC 5077: Transport Layer Security (TLS) Session Resumption without Server-Side State
Informative reference — RFC 5705: Keying Material Exporters for Transport Layer Security (TLS)
Informative reference — RFC 7457: Summarizing Known Attacks on Transport Layer Security (TLS) and Datagram TLS (DTLS)
Informative reference — RFC 5929: Channel Bindings for TLS
Informative reference — RFC 5746: Transport Layer Security (TLS) Renegotiation Indication Extension
Informative reference — RFC 6101: The Secure Sockets Layer (SSL) Protocol Version 3.0
Informative reference — RFC 7568: Deprecating Secure Sockets Layer Version 3.0

Incoming relationships (8 related RFCs)

Obsoleted by — RFC 9846: The Transport Layer Security (TLS) Protocol Version 1.3
Normatively referenced by — RFC 9325: Recommendations for Secure Use of Transport Layer Security (TLS) and Datagram Transport Layer Security (DTLS)
Normatively referenced by — RFC 7677: SCRAM-SHA-256 and SCRAM-SHA-256-PLUS Simple Authentication and Security Layer (SASL) Mechanisms
Normatively referenced by — RFC 9151: Commercial National Security Algorithm (CNSA) Suite Profile for TLS and DTLS 1.2 and 1.3
Normatively referenced by — RFC 9261: Exported Authenticators in TLS
Normatively referenced by — RFC 9729: The Concealed HTTP Authentication Scheme
Informatively referenced by — RFC 9148: EST-coaps: Enrollment over Secure Transport with the Secure Constrained Application Protocol
Informatively referenced by — RFC 9266: Channel Bindings for TLS 1.3