RFC 9421: HTTP Message Signatures

This document describes a mechanism for creating, encoding, and verifying digital signatures or message authentication codes over components of an HTTP…

Read RFC 9421 on the RFC Editor

Outgoing relationships (25 related RFCs)

Normative reference — RFC 2119: Key words for use in RFCs to Indicate Requirement Levels
Normative reference — RFC 8174: Ambiguity of Uppercase vs Lowercase in RFC 2119 Key Words
Normative reference — RFC 5234: Augmented BNF for Syntax Specifications: ABNF
Normative reference — RFC 3986: Uniform Resource Identifier (URI): Generic Syntax
Normative reference — RFC 2104: HMAC: Keyed-Hashing for Message Authentication
Normative reference — RFC 20: ASCII format for network interchange
Normative reference — RFC 6234: US Secure Hash Algorithms (SHA and SHA-based HMAC and HKDF)
Normative reference — RFC 9110: HTTP Semantics
Normative reference — RFC 8017: PKCS #1: RSA Cryptography Specifications Version 2.2
Normative reference — RFC 8032: Edwards-Curve Digital Signature Algorithm (EdDSA)
Normative reference — RFC 7517: JSON Web Key (JWK)
Normative reference — RFC 7518: JSON Web Algorithms (JWA)
Normative reference — RFC 9112: HTTP/1.1
Normative reference — RFC 8941: Structured Field Values for HTTP
Informative reference — RFC 8126: Guidelines for Writing an IANA Considerations Section in RFCs
Informative reference — RFC 8446: The Transport Layer Security (TLS) Protocol Version 1.3
Informative reference — RFC 7515: JSON Web Signature (JWS)
Informative reference — RFC 8792: Handling Long Lines in Content of Internet-Drafts and RFCs
Informative reference — RFC 6265: HTTP State Management Mechanism
Informative reference — RFC 7468: Textual Encodings of PKIX, PKCS, and CMS Structures
Informative reference — RFC 7239: Forwarded HTTP Extension
Informative reference — RFC 7807: Problem Details for HTTP APIs
Informative reference — RFC 9440: Client-Cert HTTP Header Field
Informative reference — RFC 9457: Problem Details for HTTP APIs
Informative reference — RFC 9530: Digest Fields

Incoming relationships (2 related RFCs)

Normatively referenced by — RFC 9635: Grant Negotiation and Authorization Protocol (GNAP)
Informatively referenced by — RFC 9530: Digest Fields