Privacy Pass Issuance Protocols
RFC 9578, “Privacy Pass Issuance Protocols”, is a Proposed Standard document published in June 2024 by S. Celi, A. Davidson, S. Valdez, C. A. Wood. The canonical text is published by the RFC Editor.
Abstract
This document specifies two variants of the two-message issuance protocol for Privacy Pass tokens: one that produces tokens that are privately verifiable using the Issuer Private Key and one that produces tokens that are publicly verifiable using the Issuer Public Key. Instances of "issuance protocol" and "issuance protocols" in the text of this document are used interchangeably to refer to the two variants of the Privacy Pass issuance protocol.
What “Proposed Standard” means
An entry-level standards-track specification: stable, peer-reviewed and a solid basis for implementation, though it may still evolve before becoming an Internet Standard.
The canonical text of RFC 9578 is hosted at rfc-editor.org. Available in HTML,TXT,PDF,XML.
- RFC 9577 The Privacy Pass HTTP Authentication Scheme
- RFC 9579 Use of Password-Based Message Authentication Code 1 in PKCS #12 Syntax
- RFC 9576 The Privacy Pass Architecture
- RFC 9580 OpenPGP
- RFC 9575 DRIP Entity Tag Authentication Formats and Protocols for Broadcast Remote Identification
- RFC 9581 Concise Binary Object Representation Tags for Time, Duration, and Period
- RFC 9574 Optimized Ingress Replication Solution for Ethernet VPNs
- RFC 9582 A Profile for Route Origin Authorizations