⌕ Поиск по атласу

IETF · RFC · RFC10015

RFC10015 · Deprecating Obsolete Key Exchange Methods in TLS 1.2 and DTLS 1.2

Deprecating Obsolete Key Exchange Methods in TLS 1.2 and DTLS 1.2

For (D)TLS 1.2, this document deprecates the use of two key exchanges, namely Diffie-Hellman (DH) over a finite field and RSA. It also discourages the use of static Elliptic Curve Diffie-Hellman (ECDH) cipher suites. These prescriptions apply only to (D)TLS 1.2, since (D)TLS 1.0 and TLS 1.1 are deprecated by RFC 8996 and (D)TLS 1.3 either does not use the affected algorithms or does not share the relevant configuration options. (There is no DTLS version 1.1.) This document updates RFCs 4162, 4279, 4346, 4785, 5246, 5288, 5289, 5469, 5487, 5932, 6209, 6347, 6367, 6655, 7905, 8422, and 9325 to either deprecate or discourage the use of cipher suites using the above key exchange methods in (D)TLS 1.2 connections.

Официальная английская аннотация

For (D)TLS 1.2, this document deprecates the use of two key exchanges, namely Diffie-Hellman (DH) over a finite field and RSA. It also discourages the use of static Elliptic Curve Diffie-Hellman (ECDH) cipher suites. These prescriptions apply only to (D)TLS 1.2, since (D)TLS 1.0 and TLS 1.1 are deprecated by RFC 8996 and (D)TLS 1.3 either does not use the affected algorithms or does not share the relevant configuration options. (There is no DTLS version 1.1.) This document updates RFCs 4162, 4279, 4346, 4785, 5246, 5288, 5289, 5469, 5487, 5932, 6209, 6347, 6367, 6655, 7905, 8422, and 9325 to either deprecate or discourage the use of cipher suites using the above key exchange methods in (D)TLS 1.2 connections.

Связи документа

updates: RFC4162, RFC4279, RFC4346, RFC4785, RFC5246, RFC5288, RFC5289, RFC5469, RFC5487, RFC5932, RFC6209, RFC6347, RFC6367, RFC6655, RFC7905, RFC8422, RFC9325

Официальный источник · 2026-07-01

Полные импортированные сведения карточки
{
  "id": "RFC10015",
  "number": 10015,
  "title_en": "Deprecating Obsolete Key Exchange Methods in TLS 1.2 and DTLS 1.2",
  "title_ru": "",
  "summary_ru": "",
  "purpose_ru": "",
  "use_ru": "",
  "full_translation_path": "",
  "full_translation_checked_at": "",
  "full_translation_source_sha256": "",
  "architect_note_ru": "",
  "topics_ru": [],
  "translation_state": "not_prepared",
  "verification_level": "not_prepared",
  "verification_level_ru": "Русская выжимка не подготовлена",
  "verification_note_ru": "",
  "abstract_en": "For (D)TLS 1.2, this document deprecates the use of two key exchanges, namely Diffie-Hellman (DH) over a finite field and RSA. It also discourages the use of static Elliptic Curve Diffie-Hellman (ECDH) cipher suites. These prescriptions apply only to (D)TLS 1.2, since (D)TLS 1.0 and TLS 1.1 are deprecated by RFC 8996 and (D)TLS 1.3 either does not use the affected algorithms or does not share the relevant configuration options. (There is no DTLS version 1.1.) This document updates RFCs 4162, 4279, 4346, 4785, 5246, 5288, 5289, 5469, 5487, 5932, 6209, 6347, 6367, 6655, 7905, 8422, and 9325 to either deprecate or discourage the use of cipher suites using the above key exchange methods in (D)TLS 1.2 connections.",
  "authors": [
    "N. Aviram"
  ],
  "organizations": [],
  "publication_date": "2026-07-01",
  "current_status": "PROPOSED STANDARD",
  "current_status_ru": "Предлагаемый стандарт",
  "publication_status": "PROPOSED STANDARD",
  "publication_status_ru": "Предлагаемый стандарт",
  "lifecycle": "active",
  "lifecycle_ru": "Действующий",
  "stream": "IETF",
  "stream_ru": "IETF",
  "area": "sec",
  "area_ru": "Безопасность",
  "working_group": "tls",
  "source_draft": "draft-ietf-tls-deprecate-obsolete-kex-08",
  "page_count": 21,
  "doi": "10.17487/RFC10015",
  "keywords": [
    "RSA",
    "Diffie-Hellman",
    "DH",
    "DHE",
    "ECDH",
    "ECDHE"
  ],
  "formats": [
    "HTML",
    "TXT",
    "PDF",
    "XML"
  ],
  "relations": {
    "obsoletes": [],
    "obsoleted_by": [],
    "updates": [
      "RFC4162",
      "RFC4279",
      "RFC4346",
      "RFC4785",
      "RFC5246",
      "RFC5288",
      "RFC5289",
      "RFC5469",
      "RFC5487",
      "RFC5932",
      "RFC6209",
      "RFC6347",
      "RFC6367",
      "RFC6655",
      "RFC7905",
      "RFC8422",
      "RFC9325"
    ],
    "updated_by": [],
    "is_also": [],
    "see_also": []
  },
  "links": {
    "info": "https://www.rfc-editor.org/info/rfc10015/",
    "html": "https://www.rfc-editor.org/rfc/rfc10015.html",
    "txt": "https://www.rfc-editor.org/rfc/rfc10015.txt",
    "datatracker": "https://datatracker.ietf.org/doc/rfc10015/"
  }
}