RFC9932 · Mutually Authenticating TLS in the Context of Federations

{
  "id": "RFC9932",
  "number": 9932,
  "title_en": "Mutually Authenticating TLS in the Context of Federations",
  "title_ru": "",
  "summary_ru": "",
  "purpose_ru": "",
  "use_ru": "",
  "full_translation_path": "",
  "full_translation_checked_at": "",
  "full_translation_source_sha256": "",
  "architect_note_ru": "",
  "topics_ru": [],
  "translation_state": "not_prepared",
  "verification_level": "not_prepared",
  "verification_level_ru": "Русская выжимка не подготовлена",
  "verification_note_ru": "",
  "abstract_en": "This Informational Independent Submission to the RFC Series describes a means to use TLS 1.3 to perform machine-to-machine mutual authentication within federations. This memo is not a standard. It does not modify the TLS protocol in any way, nor does it require changes to common TLS libraries. TLS is specified and standardized by the IETF's TLS Working Group. The framework enables interoperable trust management for federated machine-to-machine communication. It introduces a centrally managed trust anchor and a controlled metadata publication process, ensuring that only authorized members are identifiable within the federation. These mechanisms support unambiguous entity identification and reduce the risk of impersonation, promoting secure and policy-aligned interaction across organizational boundaries.",
  "authors": [
    "S. Halén",
    "J. Schlyter"
  ],
  "organizations": [],
  "publication_date": "2026-04-01",
  "current_status": "INFORMATIONAL",
  "current_status_ru": "Информационный",
  "publication_status": "INFORMATIONAL",
  "publication_status_ru": "Информационный",
  "lifecycle": "informational",
  "lifecycle_ru": "Справочный",
  "stream": "INDEPENDENT",
  "stream_ru": "Независимый поток",
  "area": "",
  "area_ru": "",
  "working_group": "",
  "source_draft": "draft-halen-fedae-03",
  "page_count": 30,
  "doi": "10.17487/RFC9932",
  "keywords": [
    "machine-to-machine",
    "trust framework",
    "mutual TLS",
    "mTLS",
    "public key pinning",
    "SPKI",
    "federation metadata",
    "federation"
  ],
  "formats": [
    "HTML",
    "TXT",
    "PDF",
    "XML"
  ],
  "relations": {
    "obsoletes": [],
    "obsoleted_by": [],
    "updates": [],
    "updated_by": [],
    "is_also": [],
    "see_also": []
  },
  "links": {
    "info": "https://www.rfc-editor.org/info/rfc9932/",
    "html": "https://www.rfc-editor.org/rfc/rfc9932.html",
    "txt": "https://www.rfc-editor.org/rfc/rfc9932.txt",
    "datatracker": "https://datatracker.ietf.org/doc/rfc9932/"
  }
}