RFC 6698

"The DNS-Based Authentication of Named Entities (DANE) Transport Layer Security (TLS) Protocol: TLSA", August 2012

Canonical URL:

http://www.rfc-editor.org/rfc/rfc6698.txt
This document is also available in this non-normative format: PDF.

Status:

PROPOSED STANDARD

Authors:

P. Hoffman
J. Schlyter

Stream:

IETF

Source:

dane (sec)

Please refer here for any errata for this document. To submit a new errata report, go to the main errata page.

Abstract

Encrypted communication on the Internet often uses Transport Layer Security (TLS), which depends on third parties to certify the keys used. This document improves on that situation by enabling the administrators of domain names to specify the keys used in that domain's TLS servers. This requires matching improvements in TLS client software, but no change in TLS server software. [STANDARDS-TRACK]

For the definition of Stream, see RFC 4844.