Search RFCs

RFC Editor

File formats:

Also available:XML file for editing

 

Status:

BEST CURRENT PRACTICE

Obsoletes:

RFC 5469,RFC 7507

Updates:

RFC 3261,RFC 3329,RFC 3436,RFC 3470,RFC 3501,RFC 3552,RFC 3568,RFC 3656,RFC 3749,RFC 3767,RFC 3856,RFC 3871,RFC 3887,RFC 3903,RFC 3943,RFC 3983,RFC 4097,RFC 4111,RFC 4162,RFC 4168,RFC 4217,RFC 4235,RFC 4261,RFC 4279,RFC 4497,RFC 4513,RFC 4531,RFC 4540,RFC 4582,RFC 4616,RFC 4642,RFC 4680,RFC 4681,RFC 4712,RFC 4732,RFC 4743,RFC 4744,RFC 4785,RFC 4791,RFC 4823,RFC 4851,RFC 4964,RFC 4975,RFC 4976,RFC 4992,RFC 5018,RFC 5019,RFC 5023,RFC 5024,RFC 5049,RFC 5054,RFC 5091,RFC 5158,RFC 5216,RFC 5238,RFC 5263,RFC 5281,RFC 5364,RFC 5415,RFC 5422,RFC 5456,RFC 5734,RFC 5878,RFC 5953,RFC 6012,RFC 6042,RFC 6083,RFC 6084,RFC 6176,RFC 6347,RFC 6353,RFC 6367,RFC 6460,RFC 6614,RFC 6739,RFC 6749,RFC 6750,RFC 7030,RFC 7465,RFC 7525,RFC 7562,RFC 7568,RFC 8261,RFC 8422

Authors:

K. Moriarty
S. Farrell

Stream:

IETF

Source:

tls (sec)

Cite this RFC:TXT  | XML  |  BibTeX

DOI:  https://doi.org/10.17487/RFC8996

Discuss this RFC: Send questions or comments to the mailing listtls@ietf.org

Other actions:View Errata  | Submit Errata  | Find IPR Disclosures from the IETF  | View History of RFC 8996

Abstract

This document formally deprecates Transport Layer Security (TLS)versions 1.0 (RFC 2246) and 1.1 (RFC 4346). Accordingly, thosedocuments have been moved to Historic status. These versions lacksupport for current and recommended cryptographic algorithms andmechanisms, and various government and industry profiles ofapplications using TLS now mandate avoiding these old TLS versions.TLS version 1.2 became the recommended version for IETF protocols in2008 (subsequently being obsoleted by TLS version 1.3 in 2018),providing sufficient time to transition away from older versions.Removing support for older versions from implementations reduces theattack surface, reduces opportunity for misconfiguration, andstreamlines library and product maintenance.

This document also deprecates Datagram TLS (DTLS) version 1.0 (RFC4347) but not DTLS version 1.2, and there is no DTLS version 1.1.

This document updates many RFCs that normatively refer to TLS version1.0 or TLS version 1.1, as described herein. This document alsoupdates the best practices for TLS usage in RFC 7525; hence, it ispart of BCP 195.

For the definition ofStatus,seeRFC 2026.

For the definition ofStream, seeRFC 8729.