A New Internet-Draft is available from the on-line Internet-Drafts directories.
This draft is a work item of the Transport Layer Security WG of the IETF.
Title : Deprecating TLSv1.0 and TLSv1.1
Authors : Kathleen Moriarty
Stephen Farrell
Filename : draft-ietf-tls-oldversions-deprecate-00.txt
Pages : 14
Date : 2018-09-14
Abstract:
This document [if approved] formally deprecates Transport Layer
Security (TLS) versions 1.0 [RFC2246] and 1.1 [RFC4346] and moves
these documents to the historic state. These versions lack support
for current and recommended cipher suites, and various government and
industry profiles of applications using TLS now mandate avoiding
these old TLS versions. TLSv1.2 has been the recommended version for
IETF protocols since 2008, providing sufficient time to transition
away from older versions. Products having to support older versions
increase the attack surface unnecessarily and increase opportunities
for misconfigurations. Supporting these older versions also requires
additional effort for library and product maintenance.
This document updates the backward compatibility sections of TLS RFCs
[[list TBD]] to prohibit fallback to TLSv1.0 and TLSv1.1. This
document also updates RFC 7525.
The IETF datatracker status page for this draft is:
https://datatracker.ietf.org/doc/draft-ietf-tls-oldversions-deprecate/
There are also htmlized versions available at:
https://tools.ietf.org/html/draft-ietf-tls-oldversions-deprecate-00
https://datatracker.ietf.org/doc/html/draft-ietf-tls-oldversions-deprecate-00
Please note that it may take a couple of minutes from the time of submission
until the htmlized version and diff are available at tools.ietf.org.
Internet-Drafts are also available by anonymous FTP at:
ftp://ftp.ietf.org/internet-drafts/
_______________________________________________
TLS mailing list
TLS@ietf.org
https://www.ietf.org/mailman/listinfo/tls
