Abstract: This document specifies how TLS sessions can be established at the
application layer over untrusted transport between clients and
services for the purposes of establishing secure end-to-end encrypted
communications channels. Transport layer encodings for application
layer TLS records are specified for HTTP and CoAP transport. Explicit
identification of application layer TLS packets enables middleboxes to
provide transport services and enforce suitable transport policies for
these payloads, without requiring access to the unencrypted payload
content. Multiple scenarios are presented identifying the need for
end-to-end application layer encryption between clients and services,
and the benefits of reusing the well- defined TLS protocol, and a
standard TLS stack, to accomplish this are described. Application
software architectures for building, and network architectures for
deploying application layer TLS are outlined.
Publication Year: 2018
Publication Date: 2018-01-31
Language: en
Type: article
Access and Citation
Cited By Count: 1
AI Researcher Chatbot
Get quick answers to your questions about the article from our AI researcher chatbot