Host Identity Protocol Architecture
RFC 9063, “Host Identity Protocol Architecture”, is an Informational document published in July 2021 by R. Moskowitz, M. Komu. It obsoletes RFC 4423. The canonical text is published by the RFC Editor.
Abstract
This memo describes the Host Identity (HI) namespace, which provides a cryptographic namespace to applications, and the associated protocol layer, the Host Identity Protocol, located between the internetworking and transport layers, that supports end-host mobility, multihoming, and NAT traversal. Herein are presented the basics of the current namespaces, their strengths and weaknesses, and how a HI namespace will add completeness to them. The roles of the HI namespace in the protocols are defined.
This document obsoletes RFC 4423 and addresses the concerns raised by the IESG, particularly that of crypto agility. The Security Considerations section also describes measures against flooding attacks, usage of identities in access control lists, weaker types of identifiers, and trust on first use. This document incorporates lessons learned from the implementations of RFC 7401 and goes further to explain how HIP works as a secure signaling channel.
What “Informational” means
Published for the general information of the community. It does not define an IETF standard and carries no standards-track status.
The canonical text of RFC 9063 is hosted at rfc-editor.org. Available in HTML,TXT,PDF,XML.
- RFC 9062 Framework and Requirements for Ethernet VPN Operations, Administration, and Maintenance
- RFC 9064 Considerations in the Development of a QoS Architecture for CCNx- Like Information-Centric Networking Protocols
- RFC 9061 A YANG Data Model for IPsec Flow Protection Based on Software- Defined Networking
- RFC 9065 Considerations around Transport Header Confidentiality, Network Operations, and the Evolution of Internet Transport Protocols
- RFC 9060 Secure Telephone Identity Revisited Certificate Delegation
- RFC 9066 Distributed Denial-of-Service Open Threat Signaling Signal Channel Call Home
- RFC 9059 Path Computation Element Communication Protocol Extensions for Associated Bidirectional Label Switched Paths
- RFC 9067 A YANG Data Model for Routing Policy