File formats:

Status:

PROPOSED STANDARD

Obsoletes:

RFC 6112

Updates:

RFC 4120, RFC 4121, RFC 4556

Authors:

L. Zhu
P. Leach
S. Hartman
S. Emery, Ed.

Stream:

IETF

Source:

kitten (sec)

Cite this RFC: TXT  |  XML  |   BibTeX

DOI:  https://doi.org/10.17487/RFC8062

Discuss this RFC: Send questions or comments to the mailing list kitten@ietf.org

Other actions: Submit Errata  |  Find IPR Disclosures from the IETF  |  View History of RFC 8062

Abstract

This document defines extensions to the Kerberos protocol to allow a Kerberos client to securely communicate with a Kerberos application service without revealing its identity, or without revealing more than its Kerberos realm. It also defines extensions that allow a Kerberos client to obtain anonymous credentials without revealing its identity to the Kerberos Key Distribution Center (KDC). This document updates RFCs 4120, 4121, and 4556. This document obsoletes RFC 6112 and reclassifies that document as Historic. RFC 6112 contained errors, and the protocol described in that specification is not interoperable with any known implementation. This specification describes a protocol that interoperates with multiple implementations.

For the definition of Status, see RFC 2026.

For the definition of Stream, see RFC 8729.