metasystema.org
CurrentPROPOSED STANDARDIETF stream

RFC 5746: Transport Layer Security (TLS) Renegotiation Indication Extension

In plain English — editorial summary, not part of the RFC

Secure Socket Layer (SSL) and Transport Layer Security (TLS) renegotiation are vulnerable to an attack in which the attacker forms a TLS connection with the target server, injects content of his choice, and then splices in a new TLS connection from a client. The server treats the client's initial TLS handshake as a renegotiation and thus believes that the initial data transmitted by the attacker is from the same entity as the subsequent client data. This specification defines a TLS extension to cryptographically tie renegotiations to the TLS connections they are being performed over, thus preventing this attack. [STANDARDS-TRACK]

Document record

Document ID
RFC5746
Published
February 2010
Authors
E. Rescorla; M. Ray; S. Dispensa; N. Oskov
Status
PROPOSED STANDARD
Stream
IETF
Area
sec
Pages
15
Also known as
—
Updates:
RFC 2246, RFC 4346, RFC 4347, RFC 4366, RFC 5246

Topics

Related documents

Ranked automatically by shared keywords, IETF area and stream — not by editorial selection.

Also filed under

About this page

The document record above — title, authors, date, status, stream, area, relationships, DOI and errata — is imported verbatim from the public RFC Editor index. The “in plain English” section is editorial: written by The metasystema editorial team, not part of the RFC. Where the two differ, the RFC text governs.

Last checked against the RFC Editor index on . RFCs are never revised after publication; changes are issued as new documents.

Data sources · Editorial policy · Report a correction · What is an RFC?

canonical URL: /rfc/5746-transport-layer-security-tls-renegotiation-indication-extension