Search RFCs

RFC Editor

File formats:

Status:

EXPERIMENTAL

Updates:

RFC 5246

Updated by:

RFC 8447,RFC 8996

Authors:

M. Brown
R. Housley

Stream:

IETF

Source:

NON WORKING GROUP

Cite this RFC:TXT  | XML  |  BibTeX

DOI:  https://doi.org/10.17487/RFC5878

Discuss this RFC: Send questions or comments to the mailing listiesg@ietf.org

Other actions:View Errata  | Submit Errata  | Find IPR Disclosures from the IETF  | View History of RFC 5878

Abstract

This document specifies authorization extensions to the TransportLayer Security (TLS) Handshake Protocol. Extensions are carried in theclient and server hello messages to confirm that both parties supportthe desired authorization data types. Then, if supported by both theclient and the server, authorization information, such as attributecertificates (ACs) or Security Assertion Markup Language (SAML) assertions, is exchanged in the supplemental data handshake message.This document defines an Experimental Protocol for the Internetcommunity.

For the definition ofStatus,seeRFC 2026.

For the definition ofStream, seeRFC 8729.