Service Identity in TLS
RFC 9525, “Service Identity in TLS”, is a Proposed Standard document published in November 2023 by P. Saint-Andre, R. Salz. It obsoletes RFC 6125. The canonical text is published by the RFC Editor.
Abstract
Many application technologies enable secure communication between two entities by means of Transport Layer Security (TLS) with Internet Public Key Infrastructure using X.509 (PKIX) certificates. This document specifies procedures for representing and verifying the identity of application services in such interactions.
This document obsoletes RFC 6125.
What “Proposed Standard” means
An entry-level standards-track specification: stable, peer-reviewed and a solid basis for implementation, though it may still evolve before becoming an Internet Standard.
The canonical text of RFC 9525 is hosted at rfc-editor.org. Available in HTML,TXT,PDF,XML.
- RFC 9520 Negative Caching of DNS Resolution Failures
- RFC 9518 Centralization, Decentralization, and Internet Standards
- RFC 9516 Active Operations, Administration, and Maintenance for Service Function Chaining
- RFC 9515 Revision to Registration Procedures for Multiple BMP Registries
- RFC 9514 Border Gateway Protocol - Link State Extensions for Segment Routing over IPv6
- RFC 9513 OSPFv3 Extensions for Segment Routing over IPv6
- RFC 9511 Attribution of Internet Probes
- RFC 9506 Explicit Host-to-Network Flow Measurements Techniques