{
  "number": 9431,
  "title": "Message Queuing Telemetry Transport (MQTT) and Transport Layer Security (TLS) Profile of Authentication and Authorization for Constrained Environments (ACE) Framework",
  "authors": [
    "C. Sengul",
    "A. Kirby"
  ],
  "published": "2023-07",
  "status": "Proposed Standard",
  "stream": "IETF",
  "area": "sec",
  "working_group": "ace",
  "pages": 33,
  "formats": [
    "HTML",
    "TXT",
    "PDF",
    "XML"
  ],
  "abstract": "This document specifies a profile for the Authentication and Authorization for Constrained Environments (ACE) framework to enable authorization in a publish-subscribe messaging system based on Message Queuing Telemetry Transport (MQTT). Proof-of-Possession keys, bound to OAuth 2.0 access tokens, are used to authenticate and authorize MQTT Clients. The protocol relies on TLS for confidentiality and MQTT server (Broker) authentication.",
  "keywords": [
    "publish-subscribe",
    "authorization information format"
  ],
  "draft": "draft-ietf-ace-mqtt-tls-profile-17",
  "doi": "10.17487/RFC9431",
  "urls": {
    "html": "https://rfc.dk/rfc9431/",
    "text": "https://rfc.dk/rfc9431.txt",
    "rfc_editor": "https://www.rfc-editor.org/rfc/rfc9431",
    "datatracker": "https://datatracker.ietf.org/doc/rfc9431/"
  },
  "text_modified": "2023-07-12T02:38:59.385367899Z"
}
