RFC 2818: HTTP Over TLS
This RFC has been replaced. Do not implement against it for new work — it was formally obsoleted by RFC 9110.
Current document in this lineage: RFC 7616 — HTTP Digest Access Authentication; RFC 7617 — The 'Basic' HTTP Authentication Scheme; RFC 9110 — HTTP Semantics; RFC 9111 — HTTP Caching; RFC 9112 — HTTP/1.1
In plain English — editorial summary, not part of the RFC
RFC 2818 describes HTTP over TLS — how HTTPS works at the connection level, and how a client checks that the server's certificate actually matches the hostname it asked for.
Original abstract from the RFC
This memo describes how to use Transport Layer Security (TLS) to secure Hypertext Transfer Protocol (HTTP) connections over the Internet. This memo provides information for the Internet community.
Document record
- Document ID
- RFC2818
- Published
- May 2000
- Authors
- E. Rescorla
- Status
- INFORMATIONAL
- Stream
- IETF
- Area
- sec
- Pages
- 7
- Also known as
- —
- Obsoleted by:
- RFC 9110
Topics
Standards lineage
This document is one revision in a chain of 21 RFCs, each formally replacing the one before it.
- RFC 2068 (1997)
- RFC 2069 (1997)
- RFC 2145 (1997)
- RFC 2616 (1999)
- RFC 2617 (1999)
- RFC 2818 (2000)
- RFC 7230 (2014)
- RFC 7231 (2014)
- RFC 7232 (2014)
- RFC 7233 (2014)
- RFC 7234 (2014)
- RFC 7235 (2014)
- RFC 7238 (2014)
- RFC 7538 (2015)
- RFC 7615 (2015)
- RFC 7616 (2015)
- RFC 7617 (2015)
- RFC 7694 (2015)
- RFC 9110 (2022)
- RFC 9111 (2022)
- RFC 9112 (2022) ✓
Referenced by
3 later RFCs formally update or obsolete part of this document.
Related documents
Ranked automatically by shared keywords, IETF area and stream — not by editorial selection.
- RFC 2487SMTP Service Extension for Secure SMTP over TLSObsoleted
January 1999
- RFC 2554SMTP Service Extension for AuthenticationObsoleted
March 1999
- RFC 2246The TLS Protocol Version 1.0Obsoleted
January 1999
- RFC 4366Transport Layer Security (TLS) ExtensionsObsoleted
April 2006
- RFC 2936HTTP MIME Type Handler DetectionCurrent
September 2000
- RFC 2964Use of HTTP State ManagementCurrent
October 2000
- RFC 2518HTTP Extensions for Distributed Authoring -- WEBDAVObsoleted
February 1999
- RFC 2109HTTP State Management MechanismObsoleted
February 1997
Also filed under
About this page
The document record above — title, authors, date, status, stream, area, relationships, DOI and errata — is imported verbatim from the public RFC Editor index. The “in plain English” section is editorial: written by The metasystema editorial team, not part of the RFC. Where the two differ, the RFC text governs.
Last checked against the RFC Editor index on . RFCs are never revised after publication; changes are issued as new documents.
Data sources · Editorial policy · Report a correction · What is an RFC?