TLS extensions

E893548

TLS extensions are optional protocol additions that enhance and customize Transport Layer Security (TLS) handshakes with extra capabilities such as server name indication, session tickets, and application-specific parameters.

All labels observed (2)

How this entity was disambiguated

Statements (55)

Predicate Object
instanceOf TLS protocol mechanism
network security mechanism
definedIn RFC 6066
RFC 8446
TLS 1.2 specification
linked to: TLS 1.2

TLS 1.3 specification
enablesFeature forward compatibility with new TLS versions
online certificate status via OCSP stapling
protocol negotiation via ALPN
resumption via session tickets
virtual hosting via SNI
hasProperty backward compatible
optional
hasPurpose extend TLS functionality
negotiate additional capabilities
support application-specific parameters
introducedInVersion TLS 1.0
operatesAtLayer transport layer
partOf Transport Layer Security
linked to: TLS
relatedTo TLS key exchange
X.509 certificates
cipher suite negotiation
securityConsideration improper handling can cause downgrade attacks
some extensions have been deprecated for security reasons
standardizedBy IETF
standardizedIn IETF TLS Working Group
linked to: TLS Working Group
supportsExtension Application-Layer Protocol Negotiation
Early Data
Encrypt-then-MAC
Extended Master Secret
Heartbeat
Key Share
Max Fragment Length
Next Protocol Negotiation
OCSP stapling
Pre-Shared Key
Record Size Limit
Renegotiation Indication
Server Name Indication
Session Ticket TLS
Session Tickets
Signature Algorithms
Status Request
Supported Elliptic Curves
Supported Point Formats
Supported Versions
usedBy HTTP/2 implementations
QUIC implementations
VPN implementations
XMPP servers
email servers
web browsers
web servers
usedIn DTLS
TLS handshake

How these facts were elicited

Referenced by (3)

Full triples — surface form annotated when it differs from this entity's canonical label.

RFC 6066 defines TLS extensions
RFC 4366 title Transport Layer Security (TLS) Extensions
linked to: TLS extensions
RFC 4366 defines TLS extensions