Transport Layer Security (TLS) Extensions
Transport Layer Security (TLS)
2005-11-15
2015-10-23
ExtensionType Values
Transport Layer Security (TLS)
IETF Consensus
0
server_name
1
max_fragment_length
2
client_certificate_url
3
trusted_ca_keys
4
truncated_hmac
5
status_request
6
user_mapping
7
client_authz
8
server_authz
9
cert_type
10
supported_groups (renamed from "elliptic_curves")
11
ec_point_formats
12
srp
13
signature_algorithms
14
use_srtp
15
heartbeat
16
application_layer_protocol_negotiation
17
status_request_v2
18
signed_certificate_timestamp
19
client_certificate_type
20
server_certificate_type
21
padding
22
encrypt_then_mac
23
extended_master_secret
24-34
Unassigned
35
SessionTicket TLS
36-65280
Unassigned
65281
renegotiation_info
65282-65535
Unassigned
TLS Certificate Types
Transport Layer Security (TLS)
0-223
RFC Required
224-255
Reserved for Private Use
0
X.509
1
OpenPGP
2
Raw Public Key
3-223
Unassigned
224-255
Reserved for Private Use
TLS Certificate Status Types
IETF Review
0
Reserved
1
ocsp
2
ocsp_multi
3-255
Unassigned
Application-Layer Protocol Negotiation (ALPN) Protocol IDs
Expert Review
Joe Salowey
HTTP/1.1
0x68 0x74 0x74 0x70 0x2f 0x31 0x2e 0x31 ("http/1.1")
SPDY/1
0x73 0x70 0x64 0x79 0x2f 0x31 ("spdy/1")
SPDY/2
0x73 0x70 0x64 0x79 0x2f 0x32 ("spdy/2")
SPDY/3
0x73 0x70 0x64 0x79 0x2f 0x33 ("spdy/3")
Traversal Using Relays around NAT (TURN)
0x73 0x74 0x75 0x6E 0x2E 0x74 0x75 0x72 0x6E ("stun.turn")
NAT discovery using Session Traversal Utilities for NAT (STUN)
0x73 0x74 0x75 0x6E 0x2E 0x6e 0x61 0x74 0x2d 0x64 0x69 0x73 0x63 0x6f 0x76 0x65 0x72 0x79 ("stun.nat-discovery")
HTTP/2 over TLS
0x68 0x32 ("h2")
HTTP/2 over TCP
0x68 0x32 0x63 ("h2c")
This entry reserves an identifier for use within a cleartext version
of a protocol and is not allowed to appear in a TLS ALPN negotiation.