Russ Housley
Russ Housley has worked in the computer and network security field since 1982, and he founded Vigil Security, LLC in September 2002. Russ served as the IETF Chair from March 2007 to March 2013. Russ served on the IAB from March 2007 to March 2017, and he served as IAB Chair from March 2013 to March 2015. Russ served as a member of the Internet Research Steering Group (IRSG) from May 2013 to March 2017. Russ served as Security Area Director from March 2003 to March 2007. His security research and standards interests include security protocols, certificate management, cryptographic key distribution, and high assurance design and development practices. In November 2004, Russ was recognized by the IEEE 802.11 working group for his contributions to IEEE 802.11i-2004, which fixes the severe security shortcoming of the Wired Equivalent Privacy (WEP). Russ received his B.S. in computer science from Virginia Tech in 1982, and he received his M.S. in computer science from George Mason University in 1992.
Roles
RFCs
| rfc1457 | May 1993 | Security Label Framework for the Internet |
| rfc2459 | Jan 1999 | Internet X.509 Public Key Infrastructure Certificate and CRL Profile |
| rfc2528 | Mar 1999 | Internet X.509 Public Key Infrastructure Representation of Key Exchange Algorithm (KEA) Keys in Internet X.509 Public Key Infrastructure Certificates |
| rfc2585 | May 1999 | Internet X.509 Public Key Infrastructure Operational Protocols: FTP and HTTP |
| rfc2630 | Jun 1999 | Cryptographic Message Syntax |
| rfc2773 | Feb 2000 | Encryption using KEA and SKIPJACK |
| rfc2943 | Sep 2000 | TELNET Authentication Using DSA |
| rfc2951 | Sep 2000 | TELNET Authentication Using KEA and SKIPJACK |
| rfc3217 | Dec 2001 | Triple-DES and RC2 Key Wrapping |
| rfc3279 | May 2002 | Algorithms and Identifiers for the Internet X.509 Public Key Infrastructure Certificate and Certificate Revocation List (CRL) Profile |
| rfc3280 | May 2002 | Internet X.509 Public Key Infrastructure Certificate and Certificate Revocation List (CRL) Profile |
| rfc3281 | May 2002 | An Internet Attribute Certificate Profile for Authorization |
| rfc3369 | Sep 2002 | Cryptographic Message Syntax (CMS) |
| rfc3370 | Sep 2002 | Cryptographic Message Syntax (CMS) Algorithms |
| rfc3378 | Sep 2002 | EtherIP: Tunneling Ethernet Frames in IP Datagrams |
| rfc3379 | Sep 2002 | Delegated Path Validation and Delegated Path Discovery Protocol Requirements |
| rfc3394 | Oct 2002 | Advanced Encryption Standard (AES) Key Wrap Algorithm |
| rfc3537 | May 2003 | Wrapping a Hashed Message Authentication Code (HMAC) key with a Triple-Data Encryption Standard (DES) Key or an Advanced Encryption Standard (AES) Key |
| rfc3560 | Jul 2003 | Use of the RSAES-OAEP Key Transport Algorithm in Cryptographic Message Syntax (CMS) |
| rfc3610 | Sep 2003 | Counter with CBC-MAC (CCM) |
| rfc3686 | Jan 2004 | Using Advanced Encryption Standard (AES) Counter Mode With IPsec Encapsulating Security Payload (ESP) |
| rfc3709 | Feb 2004 | Internet X.509 Public Key Infrastructure: Logotypes in X.509 Certificates |
| rfc3770 | May 2004 | Certificate Extensions and Attributes Supporting Authentication in Point-to-Point Protocol (PPP) and Wireless Local Area Networks (WLAN) |
| rfc3852 | Jul 2004 | Cryptographic Message Syntax (CMS) |
| rfc3874 | Sep 2004 | A 224-bit One-way Hash Function: SHA-224 |
| rfc4049 | Apr 2005 | BinaryTime: An Alternate Format for Representing Date and Time in ASN.1 |
| rfc4055 | Jun 2005 | Additional Algorithms and Identifiers for RSA Cryptography for use in the Internet X.509 Public Key Infrastructure Certificate and Certificate Revocation List (CRL) Profile |
| rfc4073 | May 2005 | Protecting Multiple Contents with the Cryptographic Message Syntax (CMS) |
| rfc4107 | Jun 2005 | Guidelines for Cryptographic Key Management |
| rfc4108 | Aug 2005 | Using Cryptographic Message Syntax (CMS) to Protect Firmware Packages |
| rfc4309 | Dec 2005 | Using Advanced Encryption Standard (AES) CCM Mode with IPsec Encapsulating Security Payload (ESP) |
| rfc4325 | Dec 2005 | Internet X.509 Public Key Infrastructure Authority Information Access Certificate Revocation List (CRL) Extension |
| rfc4334 | Feb 2006 | Certificate Extensions and Attributes Supporting Authentication in Point-to-Point Protocol (PPP) and Wireless Local Area Networks (WLAN) |
| rfc4630 | Aug 2006 | Update to DirectoryString Processing in the Internet X.509 Public Key Infrastructure Certificate and Certificate Revocation List (CRL) Profile |
| rfc4705 | Oct 2006 | GigaBeam High-Speed Radio Link Encryption |
| rfc4853 | Apr 2007 | Cryptographic Message Syntax (CMS) Multiple Signer Clarification |
| rfc4962 | Jul 2007 | Guidance for Authentication, Authorization, and Accounting (AAA) Key Management |
| rfc5008 | Sep 2007 | Suite B in Secure/Multipurpose Internet Mail Extensions (S/MIME) |
| rfc5055 | Dec 2007 | Server-Based Certificate Validation Protocol (SCVP) |
| rfc5083 | Nov 2007 | Cryptographic Message Syntax (CMS) Authenticated-Enveloped-Data Content Type |
| rfc5084 | Nov 2007 | Using AES-CCM and AES-GCM Authenticated Encryption in the Cryptographic Message Syntax (CMS) |
| rfc5280 | May 2008 | Internet X.509 Public Key Infrastructure Certificate and Certificate Revocation List (CRL) Profile |
| rfc5430 | Mar 2009 | Suite B Profile for Transport Layer Security (TLS) |
| rfc5480 | Mar 2009 | Elliptic Curve Cryptography Subject Public Key Information |
| rfc5485 | Mar 2009 | Digital Signatures on Internet-Draft Documents |
| rfc5649 | Sep 2009 | Advanced Encryption Standard (AES) Key Wrap with Padding Algorithm |
| rfc5652 | Sep 2009 | Cryptographic Message Syntax (CMS) |
| rfc5742 | Dec 2009 | IESG Procedures for Handling of Independent and IRTF Stream Submissions |
| rfc5755 | Jan 2010 | An Internet Attribute Certificate Profile for Authorization |
| rfc5756 | Jan 2010 | Updates for RSAES-OAEP and RSASSA-PSS Algorithm Parameters |
| rfc5781 | Feb 2010 | The rsync URI Scheme |
| rfc5877 | May 2010 | The application/pkix-attr-cert Media Type for Attribute Certificates |
| rfc5878 | May 2010 | Transport Layer Security (TLS) Authorization Extensions |
| rfc5914 | Jun 2010 | Trust Anchor Format |
| rfc5934 | Aug 2010 | Trust Anchor Management Protocol (TAMP) |
| rfc5940 | Aug 2010 | Additional Cryptographic Message Syntax (CMS) Revocation Information Choices |
| rfc6010 | Sep 2010 | Cryptographic Message Syntax (CMS) Content Constraints Extension |
| rfc6019 | Sep 2010 | BinaryTime: An Alternate Format for Representing Date and Time in ASN.1 |
| rfc6031 | Dec 2010 | Cryptographic Message Syntax (CMS) Symmetric Key Package Content Type |
| rfc6032 | Dec 2010 | Cryptographic Message Syntax (CMS) Encrypted Key Package Content Type |
| rfc6170 | May 2011 | Internet X.509 Public Key Infrastructure -- Certificate Image |
| rfc6318 | Jun 2011 | Suite B in Secure/Multipurpose Internet Mail Extensions (S/MIME) |
| rfc6360 | Aug 2011 | Conclusion of FYI RFC Sub-Series |
| rfc6410 | Oct 2011 | Reducing the Standards Track to Two Maturity Levels |
| rfc6460 | Jan 2012 | Suite B Profile for Transport Layer Security (TLS) |
| rfc6852 | Jan 2013 | Affirmation of the Modern Paradigm for Standards |
| rfc7020 | Aug 2013 | The Internet Numbers Registry System |
| rfc7036 | Oct 2013 | Object Identifier Registry for the Long-Term Archive and Notary Services (LTANS) Working Group |
| rfc7107 | Jan 2014 | Object Identifier Registry for the S/MIME Mail Security Working Group |
| rfc7191 | Apr 2014 | Cryptographic Message Syntax (CMS) Key Package Receipt and Error Content Types |
| rfc7193 | Apr 2014 | The application/cms Media Type |
| rfc7210 | Apr 2014 | Database of Long-Lived Symmetric Cryptographic Keys |
| rfc7229 | May 2014 | Object Identifiers for Test Certificate Policies |
| rfc7249 | May 2014 | Internet Numbers Registries |
| rfc7299 | Jul 2014 | Object Identifier Registry for the PKIX Working Group |
| rfc7500 | Apr 2015 | Principles for Operation of Internet Assigned Numbers Authority (IANA) Registries |
| rfc7696 | Nov 2015 | Guidelines for Cryptographic Algorithm Agility and Selecting Mandatory-to-Implement Algorithms |
| rfc7760 | Jan 2016 | Statement of Work for Extensions to the IETF Datatracker for Author Statistics |
| rfc7906 | Jun 2016 | NSA's Cryptographic Message Syntax (CMS) Key Management Attributes |
| rfc7979 | Aug 2016 | Response to the IANA Stewardship Transition Coordination Group (ICG) Request for Proposals on the IANA Protocol Parameters Registries |
| rfc8090 | Feb 2017 | Appointment Procedures for the IETF Representatives to the Community Coordination Group (CCG) |
| rfc8103 | Feb 2017 | Using ChaCha20-Poly1305 Authenticated Encryption in the Cryptographic Message Syntax (CMS) |
| rfc8358 | Mar 2018 | Update to Digital Signatures on Internet-Draft Documents |
| rfc8399 | May 2018 | Internationalization Updates to RFC 5280 |
| rfc8418 | Aug 2018 | Use of the Elliptic Curve Diffie-Hellman Key Agreement Algorithm with X25519 and X448 in the Cryptographic Message Syntax (CMS) |
| rfc8419 | Aug 2018 | Use of Edwards-Curve Digital Signature Algorithm (EdDSA) Signatures in the Cryptographic Message Syntax (CMS) |
| rfc8423 | Jul 2018 | Reclassification of Suite B Documents to Historic Status |
| rfc8591 | Apr 2019 | SIP-Based Messaging with S/MIME |
| rfc8619 | Jun 2019 | Algorithm Identifiers for the HMAC-based Extract-and-Expand Key Derivation Function (HKDF) |
Active Drafts
- draft-ietf-lamps-cms-mix-with-psk
- draft-ietf-lamps-hash-of-root-key-cert-extn
- draft-ietf-lamps-cms-hash-sig
- draft-ietf-tls-tls13-cert-with-extern-psk
- draft-iab-rfc7500-bis
- draft-iab-rfc7500-bis
- draft-ietf-cose-hash-sig
- draft-ietf-sidrops-aspa-profile
- draft-ietf-sipbrandy-rtpsec
- draft-ietf-iasa2-rfc4844-bis
Expired Drafts excluding replaced drafts
- draft-ietf-iasa2-rfc6702-bis
- draft-rhrd-tls-tls13-visibility
- draft-green-tls-static-dh-in-tls13
- draft-housley-lamps-cms-sha3-hash
- draft-iab-web-pki-problems
- draft-housley-rfc-and-id-signatures
- draft-housley-spasm-eku-constraints
- draft-ietf-ntp-cms-for-nts-message
- draft-hardie-iaoc-iab-update
- draft-housley-implementer-obligations
- draft-kolkman-iasa-ex-officio-membership
- draft-handt-sacm-alternate-architecture
- draft-handt-sacm-asset-identifiers
- draft-ymbk-ta-publication
- draft-polk-saag-rtg-auth-keytable
- draft-housley-evidence-extns
- draft-housley-pkix-ecc-pkalgs-ecdsa
- draft-housley-mass-sec-review
- draft-jwalker-eap-archie
- draft-walker-aaa-key-distribution
- draft-ietf-smime-ira
- draft-ietf-cat-ftpdsaauth
- draft-hoffman-des40
- draft-balenson-secure-email
- draft-ietf-pkix-ipki