Authenticate the intended resolver
02An encrypted channel must be evaluated together with the chosen authentication profile.
Related RFCs and changes
“Updates” changes part of an earlier RFC. “Obsoletes” replaces it. This list shows selected related documents.
DIAGRAM§ 3.2 ↗
RFC 7858 · § 3.2EXAMPLE
3 / 3
03
An authentication mismatch stops an authenticated-profile connection.
An authentication mismatch stops an authenticated-profile connection.
Protocol participantThreat or exceptionProtocol controlSimplified drawings · precise section references
RFC 7858 profilesRFC 8310 § 1
RFC 8310 updates usage profiles and adds authentication-domain-name mechanisms; do not treat encryption alone as authenticated privacy.
Read the updated RFC section ↗Opportunistic privacy alone does not defeat an active impersonator.
- Opportunistic privacy alone does not defeat an active impersonator.
- Key-pinned or later authenticated profiles require the corresponding configured identity material.
The drawing is a simplified worked example. Follow the linked RFC and its updates for implementation requirements.
Read the RFC section ↗Diagrams simplify the RFC. Read the linked sections for complete requirements.
Privacy