@misc{rfc7366, series = {Request for Comments}, number = 7366, howpublished = {RFC 7366}, publisher = {RFC Editor}, doi = {10.17487/RFC7366}, url = {https://www.rfc-editor.org/info/rfc7366}, author = {Peter Gutmann}, title = {{Encrypt-then-MAC for Transport Layer Security (TLS) and Datagram Transport Layer Security (DTLS)}}, pagetotal = 7, year = 2014, month = sep, abstract = {This document describes a means of negotiating the use of the encrypt-then-MAC security mechanism in place of the existing MAC-then-encrypt mechanism in Transport Layer Security (TLS) and Datagram Transport Layer Security (DTLS). The MAC-then-encrypt mechanism has been the subject of a number of security vulnerabilities over a period of many years.}, }