rfc-7507

TLS Fallback Signaling Cipher Suite Value (SCSV) for Preventing Protocol Downgrade Attacks

B. Moeller, A. Langley

date2015-04 streamIETF areasec wgtls statusPROPOSED STANDARD pages8 canonicalhttps://www.rfc-editor.org/rfc/rfc7507 doi10.17487/RFC7507

This document defines a Signaling Cipher Suite Value (SCSV) that prevents protocol downgrade attacks on the Transport Layer Security (TLS) and Datagram Transport Layer Security (DTLS) protocols. It updates RFCs 2246, 4346, 4347, 5246, and 6347. Server update considerations are included.

obsoleted by

rfc-8996 — Deprecating TLS 1.0 and TLS 1.1

updates

rfc-2246 — The TLS Protocol Version 1.0
rfc-4346 — The Transport Layer Security (TLS) Protocol Version 1.1
rfc-4347 — Datagram Transport Layer Security
rfc-5246 — The Transport Layer Security (TLS) Protocol Version 1.2
rfc-6347 — Datagram Transport Layer Security Version 1.2