{"draft":"draft-ietf-ace-mqtt-tls-profile-17","doc_id":"RFC9431","title":"Message Queuing Telemetry Transport (MQTT) and Transport Layer Security (TLS) Profile of Authentication and Authorization for Constrained Environments (ACE) Framework","authors":["C. Sengul","A. Kirby"],"format":["HTML","TEXT","PDF","XML"],"page_count":"33","pub_status":"PROPOSED STANDARD","status":"PROPOSED STANDARD","source":"Authentication and Authorization for Constrained Environments","abstract":"This document specifies a profile for the Authentication and\r\nAuthorization for Constrained Environments (ACE) framework to enable\r\nauthorization in a publish-subscribe messaging system based on\r\nMessage Queuing Telemetry Transport (MQTT). Proof-of-Possession keys,\r\nbound to OAuth 2.0 access tokens, are used to authenticate and\r\nauthorize MQTT Clients. The protocol relies on TLS for\r\nconfidentiality and MQTT server (Broker) authentication.","pub_date":"July 2023","keywords":["publish-subscribe","authorization information format"],"obsoletes":[],"obsoleted_by":[],"updates":[],"updated_by":[],"see_also":[],"doi":"10.17487\/RFC9431","errata_url":null}