Skip to main content

TLS Extension for DANE Client Identity
draft-ietf-dance-tls-clientid-07

Document Type Replaced Internet-Draft (dance WG)
Expired & archived
Authors Shumon Huque , Viktor Dukhovni
Last updated 2026-03-18 (Latest revision 2025-09-17)
Replaces draft-huque-tls-dane-clientid
Replaced by draft-ietf-dance-client-auth
RFC stream Internet Engineering Task Force (IETF)
Intended RFC status Proposed Standard
Formats
Reviews
Additional resources Mailing list discussion
Stream WG state Submitted to IESG for Publication
Doc Shepherd Follow-up Underway
Document shepherd Michael Richardson
Shepherd write-up Show Last changed 2025-07-25
IESG IESG state Replaced by draft-ietf-dance-client-auth
Action Holders
Consensus boilerplate Yes
Telechat date (None)
Responsible AD Deb Cooley
Send notices to mcr+ietf@sandelman.ca
IANA IANA review state IANA - Not OK
IANA expert review state Issues identified
IANA expert review comments Expert: The extension cannot be approved until the draft is changed because no new extensions can be added to TLS 1.2 or earlier[1]; the authors have yet to respond to this[2] as far as I can tell. [1] https://datatracker.ietf.org/doc/draft-ietf-tls-tls12-frozen/ [2] https://mailarchive.ietf.org/arch/msg/last-call/iWs8VNAfgILrjUuOp0CYKIiRFfI/

This Internet-Draft is no longer active. A copy of the expired Internet-Draft is available in these formats:

Abstract

This document specifies a TLS and DTLS extension to convey a DNS- Based Authentication of Named Entities (DANE) Client Identity to a TLS or DTLS server. This is useful for applications that perform TLS client authentication via DANE TLSA records.

Authors

Shumon Huque
Viktor Dukhovni

(Note: The e-mail addresses provided for the authors of this Internet-Draft may no longer be valid.)