RFC 9118: Enhanced JSON Web Token (JWT) Claim Constraints for Secure Telephone Identity Revisited (STIR) Certificates
In plain English — editorial summary, not part of the RFC
RFC 8226 specifies the use of certificates for Secure Telephone Identity Credentials; these certificates are often called "Secure Telephone Identity Revisited (STIR) Certificates". RFC 8226 provides a certificate extension to constrain the JSON Web Token (JWT) claims that can be included in the Personal Assertion Token (PASSporT), as defined in RFC 8225. If the PASSporT signer includes a JWT claim outside the constraint boundaries, then the PASSporT recipient will reject the entire PASSporT. This document updates RFC 8226; it provides all of the capabilities available in the original certificate extension as well as an additional way to constrain the allowable JWT claims. The enhanced extension can also provide a list of claims that are not allowed to be included in the PASSporT.
Document record
- Document ID
- RFC9118
- Published
- August 2021
- Authors
- R. Housley
- Status
- PROPOSED STANDARD
- Stream
- IETF
- Area
- art
- Pages
- 12
- Also known as
- —
- Updates:
- RFC 8226
Topics
Related documents
Ranked automatically by shared keywords, IETF area and stream — not by editorial selection.
- RFC 9122IANA Registry for Sieve ActionsCurrent
June 2023
- RFC 9143Negotiating Media Multiplexing Using the Session Description Protocol (SDP)Current
February 2022
- RFC 9091Experimental Domain-Based Message Authentication, Reporting, and Conformance (DMARC) Extension for Public Suffix DomainsObsoleted
July 2021
- RFC 9090Concise Binary Object Representation (CBOR) Tags for Object IdentifiersCurrent
July 2021
- RFC 9074"VALARM" Extensions for iCalendarCurrent
August 2021
- RFC 9073Event Publishing Extensions to iCalendarCurrent
August 2021
- RFC 9164Concise Binary Object Representation (CBOR) Tags for IPv4 and IPv6 Addresses and PrefixesCurrent
December 2021
- RFC 9165Additional Control Operators for the Concise Data Definition Language (CDDL)Current
December 2021
Also filed under
About this page
The document record above — title, authors, date, status, stream, area, relationships, DOI and errata — is imported verbatim from the public RFC Editor index. The “in plain English” section is editorial: written by The metasystema editorial team, not part of the RFC. Where the two differ, the RFC text governs.
Last checked against the RFC Editor index on . RFCs are never revised after publication; changes are issued as new documents.
Data sources · Editorial policy · Report a correction · What is an RFC?