[TLS] I-D Action: draft-ietf-tls-oob-pubkey-05.txt

[[e-mail]]

A New Internet-Draft is available from the on-line Internet-Drafts directories.
 This draft is a work item of the Transport Layer Security Working Group of the IETF.

	Title           : Out-of-Band Public Key Validation for Transport Layer Security (TLS)
	Author(s)       : Paul Wouters
                          Hannes Tschofenig
                          John Gilmore
                          Samuel Weiler
                          Tero Kivinen
	Filename        : draft-ietf-tls-oob-pubkey-05.txt
	Pages           : 14
	Date            : 2012-10-22

Abstract:
   This document specifies a new certificate type for exchanging raw
   public keys in Transport Layer Security (TLS) and Datagram Transport
   Layer Security (DTLS) for use with out-of-band public key validation.
   Currently, TLS authentication can only occur via X.509-based Public
   Key Infrastructure (PKI) or OpenPGP certificates.  By specifying a
   minimum resource for raw public key exchange, implementations can use
   alternative public key validation methods.

   One such alternative public key valiation method is offered by the
   DNS-Based Authentication of Named Entities (DANE) together with DNS
   Security.  Another alternative is to utilize pre-configured keys, as
   is the case with sensors and other embedded devices.  The usage of
   raw public keys, instead of X.509-based certificates, leads to a
   smaller code footprint.

   This document introduces the support for raw public keys in TLS.


The IETF datatracker status page for this draft is:
https://datatracker.ietf.org/doc/draft-ietf-tls-oob-pubkey

There's also a htmlized version available at:
http://tools.ietf.org/html/draft-ietf-tls-oob-pubkey-05

A diff from the previous version is available at:
http://www.ietf.org/rfcdiff?url2=draft-ietf-tls-oob-pubkey-05


Internet-Drafts are also available by anonymous FTP at:
ftp://ftp.ietf.org/internet-drafts/