Host Identity Protocol Certificates
RFC 6253, “Host Identity Protocol Certificates”, is an Experimental document published in May 2011 by T. Heer, S. Varjonen. It updates RFC 5201. It has been obsoleted by RFC 8002 — refer to the newer document for the authoritative version. The canonical text is published by the RFC Editor.
Abstract
The Certificate (CERT) parameter is a container for digital certificates. It is used for carrying these certificates in Host Identity Protocol (HIP) control packets. This document specifies the CERT parameter and the error signaling in case of a failed verification. Additionally, this document specifies the representations of Host Identity Tags in X.509 version 3 (v3) and Simple Public Key Infrastructure (SPKI) certificates.
The concrete use of certificates, including how certificates are obtained, requested, and which actions are taken upon successful or failed verification, is specific to the scenario in which the certificates are used. Hence, the definition of these scenario- specific aspects is left to the documents that use the CERT parameter.
This document updates RFC 5201. This document defines an Experimental Protocol for the Internet community.
What “Experimental” means
Describes a specification that is part of a research or development effort, published so the community can gain experience with it.
The canonical text of RFC 6253 is hosted at rfc-editor.org. Available in TXT,HTML.
- RFC 6252 A Framework of Media-Independent Pre-Authentication for Inter- Domain Handover Optimization
- RFC 6254 Request to Move RFC 2754 to Historic Status
- RFC 6251 Using Kerberos Version 5 over the Transport Layer Security Protocol
- RFC 6255 Delay-Tolerant Networking Bundle Protocol IANA Registries
- RFC 6250 Evolution of the IP Model
- RFC 6256 Using Self-Delimiting Numeric Values in Protocols
- RFC 6249 Metalink/HTTP: Mirrors and Hashes
- RFC 6257 Bundle Security Protocol Specification