Michael Sweet <msw...@msweet.org> wrote: >> On Apr 10, 2025, at 11:24 AM, Michael Richardson <mcr+i...@sandelman.ca> wrote: >> ... >> But, MUST do TLS 1.3 implies (to me), do *NOT* (refuse to) do TLS 1.2. >> The only way to allow (MAY) TLS 1.2, is for TLS 1.3 to be SHOULD.
> You can say "MUST support TLS 1.3, MAY support TLS 1.2, and MUST NOT If *all* participants in an interaction MUST support TLS 1.3, then there is no reason to support anything else. Unless of course, you expect some participants to violate that MUST, in which case, a document is being dishonest. An implementation which supports *only* TLS 1.3 will *not* interoperate. -- Michael Richardson <mcr+i...@sandelman.ca> . o O ( IPv6 IøT consulting ) Sandelman Software Works Inc, Ottawa and Worldwide
signature.asc
Description: PGP signature
_______________________________________________ Uta mailing list -- uta@ietf.org To unsubscribe send an email to uta-le...@ietf.org