⌕ Поиск по атласу

IETF · RFC · RFC8996

RFC8996 · Deprecating TLS 1.0 and TLS 1.1

Deprecating TLS 1.0 and TLS 1.1

This document formally deprecates Transport Layer Security (TLS) versions 1.0 (RFC 2246) and 1.1 (RFC 4346). Accordingly, those documents have been moved to Historic status. These versions lack support for current and recommended cryptographic algorithms and mechanisms, and various government and industry profiles of applications using TLS now mandate avoiding these old TLS versions. TLS version 1.2 became the recommended version for IETF protocols in 2008 (subsequently being obsoleted by TLS version 1.3 in 2018), providing sufficient time to transition away from older versions. Removing support for older versions from implementations reduces the attack surface, reduces opportunity for misconfiguration, and streamlines library and product maintenance. This document also deprecates Datagram TLS (DTLS) version 1.0 (RFC 4347) but not DTLS version 1.2, and there is no DTLS version 1.1. This document updates many RFCs that normatively refer to TLS version 1.0 or TLS version 1.1, as described herein. This document also updates the best practices for TLS usage in RFC 7525; hence, it is part of BCP 195.

Официальная английская аннотация

This document formally deprecates Transport Layer Security (TLS) versions 1.0 (RFC 2246) and 1.1 (RFC 4346). Accordingly, those documents have been moved to Historic status. These versions lack support for current and recommended cryptographic algorithms and mechanisms, and various government and industry profiles of applications using TLS now mandate avoiding these old TLS versions. TLS version 1.2 became the recommended version for IETF protocols in 2008 (subsequently being obsoleted by TLS version 1.3 in 2018), providing sufficient time to transition away from older versions. Removing support for older versions from implementations reduces the attack surface, reduces opportunity for misconfiguration, and streamlines library and product maintenance. This document also deprecates Datagram TLS (DTLS) version 1.0 (RFC 4347) but not DTLS version 1.2, and there is no DTLS version 1.1. This document updates many RFCs that normatively refer to TLS version 1.0 or TLS version 1.1, as described herein. This document also updates the best practices for TLS usage in RFC 7525; hence, it is part of BCP 195.

Связи документа

obsoletes: RFC5469, RFC7507

updates: RFC3261, RFC3329, RFC3436, RFC3470, RFC3501, RFC3552, RFC3568, RFC3656, RFC3749, RFC3767, RFC3856, RFC3871, RFC3887, RFC3903, RFC3943, RFC3983, RFC4097, RFC4111, RFC4162, RFC4168, RFC4217, RFC4235, RFC4261, RFC4279, RFC4497, RFC4513, RFC4531, RFC4540, RFC4582, RFC4616, RFC4642, RFC4680, RFC4681, RFC4712, RFC4732, RFC4743, RFC4744, RFC4785, RFC4791, RFC4823, RFC4851, RFC4964, RFC4975, RFC4976, RFC4992, RFC5018, RFC5019, RFC5023, RFC5024, RFC5049, RFC5054, RFC5091, RFC5158, RFC5216, RFC5238, RFC5263, RFC5281, RFC5364, RFC5415, RFC5422, RFC5456, RFC5734, RFC5878, RFC5953, RFC6012, RFC6042, RFC6083, RFC6084, RFC6176, RFC6347, RFC6353, RFC6367, RFC6460, RFC6614, RFC6739, RFC6749, RFC6750, RFC7030, RFC7465, RFC7525, RFC7562, RFC7568, RFC8261, RFC8422

is_also: BCP195

Официальный источник · 2021-03-01

Полные импортированные сведения карточки
{
  "id": "RFC8996",
  "number": 8996,
  "title_en": "Deprecating TLS 1.0 and TLS 1.1",
  "title_ru": "",
  "summary_ru": "",
  "purpose_ru": "",
  "use_ru": "",
  "full_translation_path": "",
  "full_translation_checked_at": "",
  "full_translation_source_sha256": "",
  "architect_note_ru": "",
  "topics_ru": [],
  "translation_state": "not_prepared",
  "verification_level": "not_prepared",
  "verification_level_ru": "Русская выжимка не подготовлена",
  "verification_note_ru": "",
  "abstract_en": "This document formally deprecates Transport Layer Security (TLS) versions 1.0 (RFC 2246) and 1.1 (RFC 4346). Accordingly, those documents have been moved to Historic status. These versions lack support for current and recommended cryptographic algorithms and mechanisms, and various government and industry profiles of applications using TLS now mandate avoiding these old TLS versions. TLS version 1.2 became the recommended version for IETF protocols in 2008 (subsequently being obsoleted by TLS version 1.3 in 2018), providing sufficient time to transition away from older versions. Removing support for older versions from implementations reduces the attack surface, reduces opportunity for misconfiguration, and streamlines library and product maintenance. This document also deprecates Datagram TLS (DTLS) version 1.0 (RFC 4347) but not DTLS version 1.2, and there is no DTLS version 1.1. This document updates many RFCs that normatively refer to TLS version 1.0 or TLS version 1.1, as described herein. This document also updates the best practices for TLS usage in RFC 7525; hence, it is part of BCP 195.",
  "authors": [
    "K. Moriarty",
    "S. Farrell"
  ],
  "organizations": [],
  "publication_date": "2021-03-01",
  "current_status": "BEST CURRENT PRACTICE",
  "current_status_ru": "Лучшая современная практика",
  "publication_status": "BEST CURRENT PRACTICE",
  "publication_status_ru": "Лучшая современная практика",
  "lifecycle": "active",
  "lifecycle_ru": "Действующий",
  "stream": "IETF",
  "stream_ru": "IETF",
  "area": "sec",
  "area_ru": "Безопасность",
  "working_group": "tls",
  "source_draft": "draft-ietf-tls-oldversions-deprecate-12",
  "page_count": 18,
  "doi": "10.17487/RFC8996",
  "keywords": [
    "TLS",
    "deprecate",
    "TLSv1.0",
    "TLSv1.1"
  ],
  "formats": [
    "HTML",
    "TXT",
    "PDF",
    "XML"
  ],
  "relations": {
    "obsoletes": [
      "RFC5469",
      "RFC7507"
    ],
    "obsoleted_by": [],
    "updates": [
      "RFC3261",
      "RFC3329",
      "RFC3436",
      "RFC3470",
      "RFC3501",
      "RFC3552",
      "RFC3568",
      "RFC3656",
      "RFC3749",
      "RFC3767",
      "RFC3856",
      "RFC3871",
      "RFC3887",
      "RFC3903",
      "RFC3943",
      "RFC3983",
      "RFC4097",
      "RFC4111",
      "RFC4162",
      "RFC4168",
      "RFC4217",
      "RFC4235",
      "RFC4261",
      "RFC4279",
      "RFC4497",
      "RFC4513",
      "RFC4531",
      "RFC4540",
      "RFC4582",
      "RFC4616",
      "RFC4642",
      "RFC4680",
      "RFC4681",
      "RFC4712",
      "RFC4732",
      "RFC4743",
      "RFC4744",
      "RFC4785",
      "RFC4791",
      "RFC4823",
      "RFC4851",
      "RFC4964",
      "RFC4975",
      "RFC4976",
      "RFC4992",
      "RFC5018",
      "RFC5019",
      "RFC5023",
      "RFC5024",
      "RFC5049",
      "RFC5054",
      "RFC5091",
      "RFC5158",
      "RFC5216",
      "RFC5238",
      "RFC5263",
      "RFC5281",
      "RFC5364",
      "RFC5415",
      "RFC5422",
      "RFC5456",
      "RFC5734",
      "RFC5878",
      "RFC5953",
      "RFC6012",
      "RFC6042",
      "RFC6083",
      "RFC6084",
      "RFC6176",
      "RFC6347",
      "RFC6353",
      "RFC6367",
      "RFC6460",
      "RFC6614",
      "RFC6739",
      "RFC6749",
      "RFC6750",
      "RFC7030",
      "RFC7465",
      "RFC7525",
      "RFC7562",
      "RFC7568",
      "RFC8261",
      "RFC8422"
    ],
    "updated_by": [],
    "is_also": [
      "BCP195"
    ],
    "see_also": []
  },
  "links": {
    "info": "https://www.rfc-editor.org/info/rfc8996/",
    "html": "https://www.rfc-editor.org/rfc/rfc8996.html",
    "txt": "https://www.rfc-editor.org/rfc/rfc8996.txt",
    "datatracker": "https://datatracker.ietf.org/doc/rfc8996/"
  }
}