RFC 9851: TLS 1.2 is in Feature Freeze

(rfc-editor.org)

19 points | by Jimmc414 2 hours ago

6 comments

  • mcpherrinm 1 hour ago
    This shouldn’t be too much of a surprise, as TLS 1.3 has been out for many years and is widely adopted.

    I haven’t paid too much attention to the TLS WG lately (for obvious reasons if you look at their mailing list), but I assume this is mostly a “if you want Post-Quantum cryptography, you need 1.3”.

  • pavon 39 minutes ago
    I assume this is in contest with RFC10015 which proposes "Deprecating Obsolete Key Exchange Methods in TLS 1.2 and DTLS 1.2"[1]. Both are Proposed Standards submitted in July, by the same author. HN discussion[2]

    [1]https://www.rfc-editor.org/rfc/rfc10015.html

    [2]https://news.ycombinator.com/item?id=49139711

  • BobbyTables2 1 hour ago
    I don’t get it. Were there revisions or optional features of v1.2?

    I thought the 1.2 spec was the frozen spec.

    • ekr____ 8 minutes ago
      TLS is an extensible protocol. For instance, you can add new key establishment algorithms or cipher suites. What this specification is saying is that the IETF will not be publishing such extensions for TLS 1.2. For example, they will not be adding post-quantum key establishment.
    • paseante 35 minutes ago
      [flagged]
  • kijin 1 hour ago
    Makes sense. Nobody wants to deal with "this user-agent claims to support TLS 1.2, except this extension that was added in 2026" anymore.

    If you're going to add or remove features, follow semver and bump that number.

  • fenestella 35 minutes ago
    [flagged]
  • richard_gg 1 hour ago
    [flagged]