This document specifies how to establish secure connection-oriented media transport sessions over the Transport Layer Security (TLS) protocol using the Session Description Protocol (SDP). It defines the SDP protocol identifier@ ??TCP/TLS??. It also defines the syntax and semantics for an SDP ??fingerprint?? attribute that identifies the certificate that will be presented for the TLS session. This mechanism allows media transport over TLS connections to be established securely@ so long as the integrity of session descriptions is assured. This document obsoletes RFC 4572 by clarifying the usage of multiple fingerprints.