{
  "number": 7366,
  "title": "Encrypt-then-MAC for Transport Layer Security (TLS) and Datagram Transport Layer Security (DTLS)",
  "authors": [
    "P. Gutmann"
  ],
  "published": "2014-09",
  "status": "Proposed Standard",
  "stream": "IETF",
  "area": "sec",
  "working_group": "tls",
  "pages": 7,
  "formats": [
    "TXT",
    "HTML"
  ],
  "abstract": "This document describes a means of negotiating the use of the encrypt-then-MAC security mechanism in place of the existing MAC-then-encrypt mechanism in Transport Layer Security (TLS) and Datagram Transport Layer Security (DTLS). The MAC-then-encrypt mechanism has been the subject of a number of security vulnerabilities over a period of many years.",
  "draft": "draft-ietf-tls-encrypt-then-mac-03",
  "doi": "10.17487/RFC7366",
  "errata_url": "https://www.rfc-editor.org/errata/rfc7366",
  "urls": {
    "html": "https://rfc.dk/rfc7366/",
    "text": "https://rfc.dk/rfc7366.txt",
    "rfc_editor": "https://www.rfc-editor.org/rfc/rfc7366",
    "datatracker": "https://datatracker.ietf.org/doc/rfc7366/"
  },
  "text_modified": "2014-09-16T00:18:18Z"
}