>    that's not workable.
  
It's not great, however
  
>    the reason why implementations chose to use old API to provision TLS 1.3 
> PSKs 
    was to make the upgrade process as smooth as possible, disabling TLS 1.3 is 
    quite antithetical to that
  
Disabling TLS 1.3 for those using 1.2 PSK's is unlikely to affect most uses, 
and seems the only way forward.

Do you have an alternative solution?

_______________________________________________
TLS mailing list
TLS@ietf.org
https://www.ietf.org/mailman/listinfo/tls

Reply via email to