RFC 7672: SMTP Security via Opportunistic DNS-Based Authentication of Named Entities (DANE) Transport Layer Security (TLS)

This memo describes a downgrade-resistant protocol for SMTP transport security between Message Transfer Agents (MTAs), based on the DNS-Based Authentication…

Read RFC 7672 on the RFC Editor

Outgoing relationships (21 related RFCs)

Normative reference — RFC 2119: Key words for use in RFCs to Indicate Requirement Levels
Normative reference — RFC 5246: The Transport Layer Security (TLS) Protocol Version 1.2
Normative reference — RFC 5280: Internet X.509 Public Key Infrastructure Certificate and Certificate Revocation List (CRL) Profile
Normative reference — RFC 1034: Domain names - concepts and facilities
Normative reference — RFC 4033: DNS Security Introduction and Requirements
Normative reference — RFC 4034: Resource Records for the DNS Security Extensions
Normative reference — RFC 4035: Protocol Modifications for the DNS Security Extensions
Normative reference — RFC 5321: Simple Mail Transfer Protocol
Normative reference — RFC 6125: Representation and Verification of Domain-Based Application Service Identity within Internet Public Key Infrastructure Using X.509 (PKIX) Certificates in the Context of Transport Layer Security (TLS)
Normative reference — RFC 6066: Transport Layer Security (TLS) Extensions: Extension Definitions
Normative reference — RFC 6698: The DNS-Based Authentication of Named Entities (DANE) Transport Layer Security (TLS) Protocol: TLSA
Normative reference — RFC 3207: SMTP Service Extension for Secure SMTP over Transport Layer Security
Normative reference — RFC 5598: Internet Mail Architecture
Normative reference — RFC 6672: DNAME Redirection in the DNS
Normative reference — RFC 6186: Use of SRV Records for Locating Email Submission/Access Services
Normative reference — RFC 7218: Adding Acronyms to Simplify Conversations about DNS-Based Authentication of Named Entities (DANE)
Informative reference — RFC 1035: Domain names - implementation and specification
Informative reference — RFC 4949: Internet Security Glossary, Version 2
Informative reference — RFC 2181: Clarifications to the DNS Specification
Informative reference — RFC 7435: Opportunistic Security: Some Protection Most of the Time
Informative reference — RFC 6409: Message Submission for Mail

Incoming relationships (4 related RFCs)

Normatively referenced by — RFC 8314: Cleartext Considered Obsolete: Use of Transport Layer Security (TLS) for Email Submission and Access
Normatively referenced by — RFC 8689: SMTP Require TLS Option
Informatively referenced by — RFC 7671: The DNS-Based Authentication of Named Entities (DANE) Protocol: Updates and Operational Guidance
Informatively referenced by — RFC 10026: Operational Recommendations for DNSSEC Delegation Signer (DS) Automation