<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet type="text/xsl" href="http-authschemes.xsl"?>
<?xml-model href="http-authschemes.rng" schematypens="http://relaxng.org/ns/structure/1.0" ?>
<registry xmlns="http://www.iana.org/assignments" id="http-authschemes">
  <title>Hypertext Transfer Protocol (HTTP) Authentication Scheme Registry</title>
  <created>2014-02-17</created>
  <updated>2025-02-18</updated>
  
  <registry id="authschemes">
    <title>HTTP Authentication Schemes</title>
    <xref type="rfc" data="rfc9110">RFC9110, Section 16.4.1</xref>
    <registration_rule>IETF Review</registration_rule>
    <record updated="2015-03-03">
      <value>Basic</value>
      <xref type="rfc" data="rfc7617"/>
      <notes/>
    </record>
    <record>
      <value>Bearer</value>
      <xref type="rfc" data="rfc6750"/>
      <notes/>
    </record>
    <record date="2024-10-01">
      <value>Concealed</value>
      <xref type="rfc" data="rfc9729"/>
      <notes/>
    </record>
    <record updated="2015-04-30">
      <value>Digest</value>
      <xref type="rfc" data="rfc7616"/>
      <notes/>
    </record>
    <record updated="2023-05-01">
      <value>DPoP</value>
      <xref type="rfc" data="rfc9449">RFC9449, Section 7.1</xref>
      <notes/>
    </record>
    <record date="2024-03-21">
      <value>GNAP</value>
      <xref type="rfc" data="rfc9635">RFC9635, Section 7.2</xref>
      <notes/>
    </record>
    <record date="2015-01-20">
      <value>HOBA</value>
      <xref type="rfc" data="rfc7486">RFC7486, Section 3</xref>
      <notes>The HOBA scheme can be used with either HTTP
   servers or proxies.  When used in response to a 407 Proxy
   Authentication Required indication, the appropriate proxy
   authentication header fields are used instead, as with any other HTTP
   authentication scheme.</notes>
    </record>
    <record date="2017-02-08">
      <value>Mutual</value>
      <xref type="rfc" data="rfc8120"/>
      <notes/>
    </record>
    <record>
      <value>Negotiate</value>
      <xref type="rfc" data="rfc4559">RFC4559, Section 3</xref>
      <notes>This authentication scheme violates both HTTP semantics (being connection-oriented) and syntax 
      (use of syntax incompatible with the WWW-Authenticate and Authorization header field syntax).</notes>
    </record>
    <record>
      <value>OAuth</value>
      <xref type="rfc" data="rfc5849">RFC5849, Section 3.5.1</xref>
      <notes/>
    </record>
    <record date="2023-11-17">
      <value>PrivateToken</value>
      <xref type="rfc" data="rfc9577">RFC9577, Section 2</xref>
      <notes/>
    </record>
    <record date="2015-12-21">
      <value>SCRAM-SHA-1</value>
      <xref type="rfc" data="rfc7804"/>
      <notes/>
    </record>
    <record date="2015-12-21">
      <value>SCRAM-SHA-256</value>
      <xref type="rfc" data="rfc7804"/>
      <notes/>
    </record>
    <record date="2017-10-19">
      <value>vapid</value>
      <xref type="rfc" data="rfc8292">RFC 8292, Section 3</xref>
      <notes/>
    </record>
  </registry>
  
  <registry id="mutual-authentication-algorithms">
    <title>HTTP Mutual Authentication Algorithms</title>
    <xref type="rfc" data="rfc8120"/>
    <registration_rule>Expert Review</registration_rule>
    <expert>Rifaat Shekh-Yusef, Yutaka Oiwa</expert>
    <record date="2017-02-21">
      <value>iso-kam3-dl-2048-sha256</value>
      <description>ISO-11770-4 KAM3, 2048-bit DL</description>
      <xref type="rfc" data="rfc8121"/>
      <controller>IESG</controller>
    </record>
    <record date="2017-02-21">
      <value>iso-kam3-dl-4096-sha512</value>
      <description>ISO-11770-4 KAM3, 4096-bit DL</description>
      <xref type="rfc" data="rfc8121"/>
      <controller>IESG</controller>
    </record>
    <record date="2017-02-21">
      <value>iso-kam3-ec-p256-sha256</value>
      <description>ISO-11770-4 KAM3, 256-bit EC</description>
      <xref type="rfc" data="rfc8121"/>
      <controller>IESG</controller>
    </record>
    <record date="2017-02-21">
      <value>iso-kam3-ec-p521-sha512</value>
      <description>ISO-11770-4 KAM3, 521-bit EC</description>
      <xref type="rfc" data="rfc8121"/>
      <controller>IESG</controller>
    </record>
  </registry>
  
  <people/>
</registry>
