Section: 13.1.1 TLS protection between NF and SEPP 13.1.1.0 General
Content: To allow for TLS protection between the SEPP and Network Functions or SCPs within a PLMN, the SEPP shall support: - TLS wildcard certificate for its domain name and generation of telescopic FQDN based on an FQDN obtained from the received N32-f message as specified in clause 13.1.1.1. - using the custom HTTP header 3gpp-Sbi-Target-apiRoot, defined in clause 5.2.3.2.4 of TS 29.500[ 5G System; Technical Realization of Service Based Architecture; Stage 3 ] [74], in the HTTP request originated by the NF within the SEPP’s PLMN, to forward the protected HTTP Request message towards the remote PLMN as specified in clause 13.1.1.2. NOTE: Whether the SEPP and NFs within the SEPP’s PLMN use telescopic FQDN or the custom HTTP header is based on PLMN operator’s policy.