]> Apple

e_gorbaty@apple.com

Akamai

mbishop@evequefou.be

Web and Internet Transport HTTP exported authenticators masque This document defines a way for HTTP/2 and HTTP/3 servers to send additional certificate-based credentials after a TLS connection is established, based on TLS Exported Authenticators. About This Document The latest revision of this draft can be found at . Status information for this document may be found at . Discussion of this document takes place on the HTTP Working Group mailing list (), which is archived at . Source for this draft and an issue tracker can be found at .

Introduction HTTP clients need to know that the content they receive on a connection comes from the origin from which they intended to retrieve it. The traditional form of server authentication in HTTP has been in the form of a single X.509 certificate provided during the TLS handshake. TLS supports one server and one client certificate on a connection. These certificates may contain multiple identities, but only one certificate may be provided. Many HTTP servers host content from several origins. HTTP/2 and HTTP/3 permit clients to reuse an existing HTTP connection to a server provided that the secondary origin is also in the certificate provided during the TLS handshake. In many cases, servers choose to maintain separate certificates for different origins but still desire the benefits of a shared HTTP connection. This document defines a capability for servers to use and to authenticate with those separate certificates over a shared connection. The ability to maintain separate certificates for different origins can also allow proxies that cache content from secondary origins to communicate to clients that they can service some of those origins directly, allowing the proxy to behave as a TLS-terminating reverse proxy for those origins instead of establishing a TLS encrypted tunnel through the proxy.

Server Certificate Authentication and describe how connections may be used to make requests from multiple origins as long as the server is authoritative for both. A server is considered authoritative for an origin if DNS resolves the origin to the IP address of the server and (for TLS) if the certificate presented by the server contains the origin in the Subject Alternative Names field. enables a step of abstraction from the DNS resolution. If both hosts have provided an Alternative Service at hostnames which resolve to the IP address of the server, they are considered authoritative just as if DNS resolved the origin itself to that address. However, the server's one TLS certificate is still required to contain the name of each origin in question. relaxes the requirement to perform the DNS lookup if already connected to a server with an appropriate certificate which claims support for a particular origin. Servers which host many origins often would prefer to have separate certificates for some sets of origins. This may be for ease of certificate management (the ability to separately revoke or renew them), due to different sources of certificates (a content delivery network acting on behalf of multiple origins), or other factors which might drive this administrative decision. Clients connecting to such origins cannot currently reuse connections, even if both client and server would prefer to do so. Because the TLS Server Name Indication (SNI) extension is exchanged in the clear unless TLS Encrypted Client Hello is used, a server might prefer to present a general-purpose certificate at the TLS layer and provide the "real" certificates in HTTP after the connection is established.

TLS Exported Authenticators TLS Exported Authenticators are structured messages that can be exported by either party of a TLS connection and validated by the other party. Given an established TLS connection, an authenticator message can be constructed proving possession of a certificate and a corresponding private key. The mechanisms that this document defines are primarily focused on the server's ability to generate TLS Exported Authenticators. Each Authenticator is computed using a Handshake Context and Finished MAC Key derived from the TLS session. The Handshake Context is identical for both parties of the TLS connection, while the Finished MAC Key is dependent on whether the Authenticator is created by the client or the server. Successfully verified Authenticators result in certificate chains, with verified possession of the corresponding private key, which can be supplied into a collection of available certificates. Likewise, descriptions of desired certificates can also be supplied into these collections.

HTTP-Layer Certificate Authentication This document defines HTTP/2 and HTTP/3 SERVER_CERTIFICATE frames () to carry the relevant certificate messages, enabling certificate-based authentication of servers independent of TLS version. This mechanism can be implemented at the HTTP layer without breaking the existing interface between HTTP and applications above it. TLS Exported Authenticators allow HTTP/2 and HTTP/3 servers to send certificate frames which can be used to prove the server's authenticity for multiple origins. This document additionally defines SETTINGS parameters for HTTP/2 and HTTP/3 () that allow the client and server to indicate support for HTTP-layer certificate authentication.

Conventions and Definitions The key words "MUST", "MUST NOT", "REQUIRED", "SHALL", "SHALL NOT", "SHOULD", "SHOULD NOT", "RECOMMENDED", "NOT RECOMMENDED", "MAY", and "OPTIONAL" in this document are to be interpreted as described in BCP 14 when, and only when, they appear in all capitals, as shown here.

Discovering Additional Certificates at the HTTP Layer A certificate chain with proof of possession of the private key corresponding to the end-entity certificate is sent as a SERVER_CERTIFICATE frame (see , ) to the client. Once the holder of a certificate has sent the chain and proof, this certificate chain is cached by the recipient and available for future use.

Indicating Support for HTTP-Layer Server Certificate Authentication The SETTINGS_HTTP_SERVER_CERT_AUTH parameters for HTTP/2 and HTTP/3 are defined in so that clients and servers can indicate support for secondary server certificate authentication. HTTP/2 and HTTP/3 endpoints that wish to indicate support for HTTP-layer certificate authentication MUST send a SETTINGS_HTTP_SERVER_CERT_AUTH parameter set to "1" in their SETTINGS frame. Endpoints MUST NOT use any of the authentication functionality described in this document unless they have both sent and received SETTINGS_HTTP_SERVER_CERT_AUTH with a value of 1. Endpoints MUST NOT send a SETTINGS_HTTP_SERVER_CERT_AUTH parameter with a value of 0 after previously sending a value of 1. SETTINGS_HTTP_SERVER_CERT_AUTH indicates that servers are able to offer additional certificates to demonstrate control over other origin hostnames, and that clients are able to make requests for hostnames received in a TLS Exported Authenticator that the server sends.

Making Certificates Available When both peers have advertised support for HTTP-layer server certificates as in , the server can supply additional certificates into the connection at any time. That is, if both endpoints have sent SETTINGS_HTTP_SERVER_CERT_AUTH and validated the value received from the peer, the server may send certificates spontaneously, at any time, as described by the Spontaneous Server Authentication message sequence in . This does mean that if a server knows it supports secondary certificate authentication, and it receives SETTINGS_HTTP_SERVER_CERT_AUTH from the client, that it can enqueue certificates immediately following the received SETTINGS frame. Certificates supplied by servers can be considered by clients without further action by the server. A server SHOULD NOT send certificates which do not cover origins which it is prepared to service on the current connection, and SHOULD NOT send them if the client has not indicated support with SETTINGS_HTTP_SERVER_CERT_AUTH. A client MUST NOT send certificates to the server. The server MUST close the connection upon receipt of a SERVER_CERTIFICATE frame from a client.

Simple unprompted server authentication | | | | (stream N) 200 OK | |<-------------------------------------------------------------| | | ]]>

A server MAY send a SERVER_CERTIFICATE immediately after sending its SETTINGS. However, it MAY also send certificates at any time later. For example, a proxy might discover that a client is interested in an origin that it can reverse proxy at the time that a client sends a CONNECT request. It can then send certificates for those origins to allow for TLS-terminated reverse proxying to those origins for the remainder of the connection lifetime. illustrates this behavior.

Reverse proxy server authentication | | | | (stream 0 / control stream) SERVER_CERTIFICATE | |<-------------------------------------------------------------| | | | (stream N) 200 OK | |<-------------------------------------------------------------| | | | ... | | | | (stream M) GET /to-new-origin | |------------------------------------------------------------->| | | | (stream M, direct from server) 200 OK | |<-------------------------------------------------------------| | | ]]>

SETTINGS_HTTP_SERVER_CERT_AUTH SETTINGS parameters for HTTP/2 and HTTP/3 separately are defined below.

The SETTINGS_HTTP_SERVER_CERT_AUTH HTTP/2 SETTINGS Parameter This document adds a new HTTP/2 SETTINGS(0xTBD) parameter to those defined by . The new parameter name is SETTINGS_HTTP_SERVER_CERT_AUTH. The value of the parameter MUST be 0 or 1. The usage of this parameter is described in .

The SETTINGS_HTTP_SERVER_CERT_AUTH HTTP/3 SETTINGS Parameter This document adds a new HTTP/3 SETTINGS(0xTBD) parameter to those defined by . The new parameter name is SETTINGS_HTTP_SERVER_CERT_AUTH. The value of the parameter MUST be 0 or 1. The usage of this parameter is described in .

SERVER_CERTIFICATE frame The SERVER_CERTIFICATE frame contains an exported authenticator message from the TLS layer that provides a chain of certificates and associated extensions, proving possession of the private key corresponding to the end-entity certificate. The client is permitted to make subsequent requests for resources upon receipt of a SERVER_CERTIFICATE frame without further action from the server. Upon receiving a SERVER_CERTIFICATE frame, the receiver may validate the Exported Authenticator value by using the exported authenticator API. This returns either an error indicating that the message was invalid or the certificate chain and extensions used to create the message.

HTTP/2 SERVER_CERTIFICATE frame A SERVER_CERTIFICATE frame in HTTP/2 (type=0xTBD) carries a TLS Exported Authenticator that clients can use to authenticate secondary origins from a sending server. The SERVER_CERTIFICATE frame applies to the connection, not a specific stream. It MUST be sent on stream 0. An endpoint MUST treat a SERVER_CERTIFICATE frame with a stream identifier other than 0x00 as a connection error.

HTTP/2 SERVER_CERTIFICATE Frame

The Length, Type, Unused Flag(s), Reserved, and Stream Identifier fields are described in . The SERVER_CERTIFICATE frame does not define any flags. The Authenticator field is the opaque data returned from the TLS connection exported authenticator authenticate API. See for more details on the input to this API.

HTTP/3 SERVER_CERTIFICATE frame A SERVER_CERTIFICATE frame in HTTP/3 (type=0xTBD) carries a TLS Exported Authenticator that clients can use to authenticate secondary origins from a sending server. The SERVER_CERTIFICATE frame applies to the connection, not a specific stream. It MUST be sent on the control stream. An endpoint MUST treat a SERVER_CERTIFICATE frame received on any stream other than the control stream as a connection error.

HTTP/3 SERVER_CERTIFICATE Frame

The Type and Length fields are described in . The Authenticator field is the opaque data returned from the TLS connection exported authenticator authenticate API. See for more details on the input to this API.

Exported Authenticator Characteristics The Exported Authenticator API defined in takes as input a request, a set of certificates, and supporting information about the certificate (Online Certificate Status Protocol (OCSP) responses, Signed Certificate Timestamps (SCTs), etc.). The result is an opaque token which is used when generating the SERVER_CERTIFICATE frame. Upon receipt of a SERVER_CERTIFICATE frame, a client which has negotiated support for secondary certificates MUST perform the following steps to validate the token it contains:

• Using the get context API, retrieve the certificate_request_context used to generate the authenticator, if any. Because the certificate_request_context for spontaneous server certificates is chosen by the server, the usage of the certificate_request_context is implementation-dependent. For details, see .
• Use the validate API to confirm the validity of the authenticator with regard to the generated request, if any.

If the authenticator cannot be validated, this MUST be treated as a connection error of type SERVER_CERTIFICATE_INVALID (). Once the authenticator is accepted, the endpoint can perform any other checks for the acceptability of the certificate itself.

Indicating Failures During HTTP-Layer Certificate Authentication Because this document permits certificates to be exchanged at the HTTP framing layer instead of the TLS layer, several certificate-related errors which are defined at the TLS layer might now occur at the HTTP framing layer. There are two classes of errors which might be encountered, and they are handled differently.

Misbehavior This category of errors could indicate a peer failing to follow requirements in this document or might indicate that the connection is not fully secure. These errors are fatal to stream or connection, as appropriate.

SERVER_CERTIFICATE_INVALID (0xTBD):

An exported authenticator could not be validated.

Invalid Certificates Unacceptable certificates (expired, revoked, or insufficient to satisfy the request) are not treated as stream or connection errors. This is typically not an indication of a protocol failure. Clients SHOULD establish a new connection in an attempt to reach an authoritative server if they deem a certificate from the server unacceptable.

Security Considerations This mechanism defines an alternate way to obtain server certificates other than in the initial TLS handshake. While the signature of exported authenticator values is expected to be equally secure, it is important to recognize that a vulnerability in this code path is at least equal to a vulnerability in the TLS handshake.

Impersonation This mechanism could increase the impact of a key compromise. Rather than needing to subvert DNS or IP routing in order to use a compromised certificate, a malicious server now only needs a client to connect to some HTTPS site under its control in order to present the compromised certificate. Clients SHOULD consult DNS for hostnames presented in secondary certificates if they would have done so for the same hostname if it were present in the primary certificate. As recommended in , clients opting not to consult DNS ought to employ some alternative means to increase confidence that the certificate is legitimate, such as an ORIGIN frame. As noted in the Security Considerations of , it is difficult to formally prove that an endpoint is jointly authoritative over multiple certificates, rather than individually authoritative on each certificate. As a result, clients MUST NOT assume that because one origin was previously colocated with another, those origins will be reachable via the same endpoints in the future. Clients MUST NOT consider previous secondary certificates to be validated after TLS session resumption. Servers MAY re-present certificates if a TLS Session is resumed.

Fingerprinting This document defines a mechanism which could be used to probe servers for origins they support, but it opens no new attack that was not already possible by making repeat TLS connections with different SNI values.

Persistence of Service CNAME records in the DNS are frequently used to delegate authority for an origin to a third-party provider. This delegation can be changed without notice, even to the third-party provider, simply by modifying the CNAME record in question. After the owner of the domain has redirected traffic elsewhere by changing the CNAME, new connections will not arrive for that origin, but connections which are properly directed to this provider for other origins would continue to claim control of this origin (via Secondary Certificates). This is proper behavior based on the third-party provider's configuration, but would likely not be what is intended by the owner of the origin. This is not an issue which can be mitigated by the protocol, but something about which third-party providers SHOULD educate their customers before using the features described in this document.

Confusion About State Implementations need to be aware of the potential for confusion about the state of a connection. The presence or absence of a validated certificate can change during the processing of a request, potentially multiple times, as SERVER_CERTIFICATE frames are received. A client that uses certificate authentication needs to be prepared to reevaluate the authorization state of a request as the set of certificates changes. Behavior for TLS-terminating reverse proxies is also worth considering. If a server which situationally reverse-proxies wishes for the client to view a request made prior to receipt of certificates as TLS-terminated, or wishes for the client to start a new tunnel alternatively, this document does not currently define formal mechanisms to facilitate that intention.

IANA Considerations This document registers the SERVER_CERTIFICATE frame type, SETTINGS_HTTP_SERVER_CERT_AUTH setting, and SERVER_CERTIFICATE_INVALID error code for both and .

Frame Types This specification registers the following entry in the "HTTP/2 Frame Type" registry defined in :

Code:

TBD

Frame Type:

SERVER_CERTIFICATE

Reference:

This document

This specification registers the following entry in the "HTTP/3 Frame Types" registry established by :

Value:

TBD

Frame Type:

SERVER_CERTIFICATE

Status:

permanent

Reference:

This document

Change Controller:

IETF

Contact:

ietf-http-wg@w3.org

Settings Parameters This specification registers the following entry in the "HTTP/2 Settings" registry defined in :

Code:

TBD

Name:

SETTINGS_HTTP_SERVER_CERT_AUTH

Initial Value:

0

Reference:

This document

This specification registers the following entry in the "HTTP/3 Settings" registry defined in :

Value:

TBD

Setting Name:

SETTINGS_HTTP_SERVER_CERT_AUTH

Default:

0

Status:

permanent

Reference:

This document

Change Controller:

IETF

Contact:

ietf-http-wg@w3.org

Error Codes This specification registers the following entry in the "HTTP/2 Error Code" registry defined in :

Code:

TBD

Name:

SERVER_CERTIFICATE_INVALID

Description:

There was an issue processing the SERVER_CERTIFICATE frame.

Reference:

This document

This specification registers the following entry in the "HTTP/3 Error Codes" registry established by :

Value:

TBD

Name:

SERVER_CERTIFICATE_INVALID

Description:

There was an issue processing the SERVER_CERTIFICATE frame.

Status:

permanent

Reference:

This document

Change Controller:

IETF

Contact:

ietf-http-wg@w3.org

References Normative References The Hypertext Transfer Protocol (HTTP) is a stateless application-level protocol for distributed, collaborative, hypertext information systems. This document describes the overall architecture of HTTP, establishes common terminology, and defines aspects of the protocol that are shared by all versions. In this definition are core protocol elements, extensibility mechanisms, and the "http" and "https" Uniform Resource Identifier (URI) schemes. This document updates RFC 3864 and obsoletes RFCs 2818, 7231, 7232, 7233, 7235, 7538, 7615, 7694, and portions of 7230. This document specifies version 1.3 of the Transport Layer Security (TLS) protocol. TLS allows client/server applications to communicate over the Internet in a way that is designed to prevent eavesdropping, tampering, and message forgery. This document obsoletes RFC 8446, which specified TLS 1.3. This document obsoletes RFC 5246 (specifying TLS 1.2) and RFCs 5077, 6961, 7627, and 8422, all of which pertain to TLS 1.2 or earlier, and updates RFCs 5705 and 6066. This document also specifies new requirements for TLS 1.2 implementations. This specification describes an optimized expression of the semantics of the Hypertext Transfer Protocol (HTTP), referred to as HTTP version 2 (HTTP/2). HTTP/2 enables a more efficient use of network resources and a reduced latency by introducing field compression and allowing multiple concurrent exchanges on the same connection. This document obsoletes RFCs 7540 and 8740. The QUIC transport protocol has several features that are desirable in a transport for HTTP, such as stream multiplexing, per-stream flow control, and low-latency connection establishment. This document describes a mapping of HTTP semantics over QUIC. This document also identifies HTTP/2 features that are subsumed by QUIC and describes how HTTP/2 extensions can be ported to HTTP/3. This document describes a mechanism that builds on Transport Layer Security (TLS) or Datagram Transport Layer Security (DTLS) and enables peers to provide proof of ownership of an identity, such as an X.509 certificate. This proof can be exported by one peer, transmitted out of band to the other peer, and verified by the receiving peer. In many standards track documents several words are used to signify the requirements in the specification. These words are often capitalized. This document defines these words as they should be interpreted in IETF documents. This document specifies an Internet Best Current Practices for the Internet Community, and requests discussion and suggestions for improvements. RFC 2119 specifies common key words that may be used in protocol specifications. This document aims to reduce the ambiguity by clarifying that only UPPERCASE usage of the key words have the defined special meanings. Informative References This document specifies "Alternative Services" for HTTP, which allow an origin's resources to be authoritatively available at a separate network location, possibly accessed with a different protocol configuration. This document specifies the ORIGIN frame for HTTP/2, to indicate what origins are available on a given connection. This document describes a mechanism in Transport Layer Security (TLS) for encrypting a message under a server public key.

Acknowledgments This document is based on draft-ietf-httpbis-http2-secondary-certs. Thanks to Nick Sullivan, Martin Thomson and other contributors for their work on it. And thanks to Eric Kinnear, Tommy Pauly, and Lucas Pardue for their guidance and editorial contributions to this document.