TLS Proxy Best Practice

Document Type Expired Internet-Draft (individual)
Authors Eric Wang  , Andrew Ossipov  , Roelof DuToit 
Last updated 2020-12-06 (latest revision 2020-06-04)
Replaces draft-wang-tls-proxy-best-practice
Stream (None)
Intended RFC status (None)
Expired & archived
pdf htmlized bibtex
Stream Stream state (No stream defined)
Consensus Boilerplate Unknown
RFC Editor Note (None)
IESG IESG state Expired
Telechat date
Responsible AD (None)
Send notices to (None)

This Internet-Draft is no longer active. A copy of the expired Internet-Draft can be found at


TLS proxies are widely deployed by organizations to enable security features and apply enterprise policies. This document defines a TLS proxy and discusses a wide range of security requirements to guide TLS proxy implementations.


Eric Wang (
Andrew Ossipov (
Roelof DuToit (

(Note: The e-mail addresses provided for the authors of this Internet-Draft may no longer be valid.)