* The simple explanation is that people think they will have serious issues with TLS1.3 and actually, TLS1.2 when it is DH only.
They have a problem with a protocol that doesn’t use static-RSA key exchange. And they would rather not pay for a solution to that problem.
_______________________________________________ TLS mailing list TLS@ietf.org https://www.ietf.org/mailman/listinfo/tls