On Tue, Nov 17, 2015 at 09:14:00PM +0200, Ilari Liusvaara wrote: > > Where does that leave ciphersuites that are "Recommended" for TLS > > 1.2, but TLS 1.3? Or do none of the CBC block ciphers in TLS 1.2 qualify? > > None of block ciphers (nor stream ciphers) work in TLS 1.3 at all. > > All current registered/proposed ciphersuites that work in TLS 1.3 are > *-GCM or *-POLY1305 ones (with DHE or ECDHE).
I'm well aware of that, I'm just wondering whether the "Recommended" column should cover recommendations for TLS 1.2 as well TLS 1.3? That is, I thought it might distinguish between mainstream and non-mainstream ciphers for multiple protocol versions. -- Viktor. _______________________________________________ TLS mailing list TLS@ietf.org https://www.ietf.org/mailman/listinfo/tls