Transport Layer Security Authorization Extensions
RFC 5878, “Transport Layer Security Authorization Extensions”, is an Experimental document published in May 2010 by M. Brown, R. Housley. It updates RFC 5246. It has since been updated by RFC 8447, RFC 8996. The canonical text is published by the RFC Editor.
Abstract
This document specifies authorization extensions to the Transport Layer Security (TLS) Handshake Protocol. Extensions are carried in the client and server hello messages to confirm that both parties support the desired authorization data types. Then, if supported by both the client and the server, authorization information, such as attribute certificates (ACs) or Security Assertion Markup Language (SAML) assertions, is exchanged in the supplemental data handshake message. This document defines an Experimental Protocol for the Internet community.
What “Experimental” means
Describes a specification that is part of a research or development effort, published so the community can gain experience with it.
The canonical text of RFC 5878 is hosted at rfc-editor.org. Available in TXT,HTML.
- RFC 5877 The application/pkix-attr-cert Media Type for Attribute Certificates
- RFC 5879 Heuristics for Detecting ESP-NULL Packets
- RFC 5876 Updates to Asserted Identity in the Session Initiation Protocol
- RFC 5880 Bidirectional Forwarding Detection
- RFC 5875 An Extensible Markup Language Configuration Access Protocol Diff Event Package
- RFC 5881 Bidirectional Forwarding Detection for IPv4 and IPv6
- RFC 5874 An Extensible Markup Language Document Format for Indicating a Change in XML Configuration Access Protocol Resources
- RFC 5882 Generic Application of Bidirectional Forwarding Detection