RFC 7633: X.509v3 Transport Layer Security (TLS) Feature Extension

The purpose of the TLS feature extension is to prevent downgrade attacks that are not otherwise prevented by the TLS protocol. In particular, the TLS feature…

Read RFC 7633 on the RFC Editor

Outgoing relationships (8 related RFCs)

Normative reference — RFC 2119: Key words for use in RFCs to Indicate Requirement Levels
Normative reference — RFC 5246: The Transport Layer Security (TLS) Protocol Version 1.2
Normative reference — RFC 5280: Internet X.509 Public Key Infrastructure Certificate and Certificate Revocation List (CRL) Profile
Normative reference — RFC 6066: Transport Layer Security (TLS) Extensions: Extension Definitions
Normative reference — RFC 5912: New ASN.1 Modules for the Public Key Infrastructure Using X.509 (PKIX)
Normative reference — RFC 2986: PKCS #10: Certification Request Syntax Specification Version 1.7
Normative reference — RFC 6961: The Transport Layer Security (TLS) Multiple Certificate Status Request Extension
Normative reference — RFC 6844: DNS Certification Authority Authorization (CAA) Resource Record

Incoming relationships (2 related RFCs)

Informatively referenced by — RFC 9325: Recommendations for Secure Use of Transport Layer Security (TLS) and Datagram Transport Layer Security (DTLS)
Informatively referenced by — RFC 8739: Support for Short-Term, Automatically Renewed (STAR) Certificates in the Automated Certificate Management Environment (ACME)