ekr, While we’re moving the entire document to PS, we’re also following it with https://datatracker.ietf.org/doc/draft-ietf-tls-iana-registry-updates/ that adds a “Recommended" column that is not (see s6) going to include marking “Y” for any of the CBC algorithms. So, I think we’re okay.
spt > On Mar 16, 2017, at 11:17, Eric Rescorla <e...@rtfm.com> wrote: > > Hi folks > > I note that we are proposing to uplift RFC 5289 to PS, despite the fact that > it > standardizes some CBC cipher suites, which the WG is looking to move away > from. I recognize that these are the only cipher suites you can use in TLS 1.0 > and 1.1, but we also want people to move away from them. > > This problem is probably solvable by marking the registry as Not Recommended, > but I wondered if anyone had other thoughts on this topic? > > -Ekr > > _______________________________________________ > TLS mailing list > TLS@ietf.org > https://www.ietf.org/mailman/listinfo/tls _______________________________________________ TLS mailing list TLS@ietf.org https://www.ietf.org/mailman/listinfo/tls
