Records protect fragments
03The record layer frames fragments and applies the chosen protection construction.
Terms in this drawing
This guide explains the 2008 publication. Superseded by RFC 8446, RFC 9846.
Related RFCs and changes
“Updates” changes part of an earlier RFC. “Obsoletes” replaces it. This list shows selected related documents.
DIAGRAM§ 6.2.3 ↗
RFC 5246 · § 6.2.3EXAMPLE
3 / 3
03
Verify
The receiver checks authentication before releasing the plaintext.
Protocol participantThreat or exceptionProtocol controlSimplified drawings · precise section references
Read the updated RFC section ↗
TLS 1.2 supports different protection constructions; AEAD is a distinct case.
- TLS 1.2 supports different protection constructions; AEAD is a distinct case.
- The record header remains visible.
- A failed integrity check must not release unauthenticated application data.
The illustration is schematic. Example values are illustrative; profiles and later security guidance can add requirements.
Read the RFC section ↗Diagrams simplify the RFC. Read the linked sections for complete requirements.
Privacy