{ "$schema": "/api/schemas/documents.schema.json", "apiVersion": "1.1.0", "lastModified": "2026-10-08T21:57:38.974Z", "sourcePath": "src/main/data/docs", "docId": "RFC8996", "document": { "abstract": "This document formally deprecates Transport Layer Security (TLS) versions 1.0 (RFC 2246) and 1.1 (RFC 4346). Accordingly, those documents have been moved to Historic status. These versions lack support for current and recommended cryptographic algorithms and mechanisms, and various government and industry profiles of applications using TLS now mandate avoiding these old TLS versions. TLS version 1.2 became the recommended version for IETF protocols in 2008 (subsequently being obsoleted by TLS version 1.3 in 2018), providing sufficient time to transition away from older versions. Removing support for older versions from implementations reduces the attack surface, reduces opportunity for misconfiguration, and streamlines library and product maintenance. This document also deprecates Datagram TLS (DTLS) version 1.0 (RFC 4347) but not DTLS version 1.2, and there is no DTLS version 1.1. This document updates many RFCs that normatively refer to TLS version 1.0 or TLS version 1.1, as described herein. This document also updates the best practices for TLS usage in RFC 7525; hence, it is part of BCP 195.", "abstract$meta": { "confidence": "high", "note": "Parsed from RFC index XML abstract", "originalValue": null, "source": "parsed", "sourceUrl": "https://www.rfc-editor.org/info/rfc8996/", "updated": "2026-10-08T21:57:38.973Z", "version": "extractDocs.js@commit:350f56b7df8d" }, "authors": [ { "name": "Kathleen Moriarty" }, { "name": "Stephen Farrell" } ], "authors$meta": { "confidence": "high", "note": "Parsed from Datatracker doc page article:author (profile full names)", "originalValue": null, "source": "parsed", "sourceUrl": "https://www.rfc-editor.org/info/rfc8996/", "updated": "2026-10-08T21:57:38.973Z", "version": "extractDocs.js@commit:350f56b7df8d" }, "docId": "RFC8996", "docId$meta": { "confidence": "high", "note": "Derived from RFC number or Datatracker identifier", "originalValue": null, "source": "resolved", "sourceUrl": "https://www.rfc-editor.org/info/rfc8996/", "updated": "2026-10-08T21:57:38.973Z", "version": "extractDocs.js@commit:350f56b7df8d" }, "docLabel": "IETF RFC 8996", "docLabel$meta": { "confidence": "high", "note": "Constructed from provider and document identifier", "originalValue": null, "source": "resolved", "sourceUrl": "https://www.rfc-editor.org/info/rfc8996/", "updated": "2026-10-08T21:57:38.973Z", "version": "extractDocs.js@commit:350f56b7df8d" }, "docNumber": "8996", "docNumber$meta": { "confidence": "high", "note": "Parsed from RFC info page report metadata", "originalValue": null, "source": "parsed", "sourceUrl": "https://www.rfc-editor.org/info/rfc8996/", "updated": "2026-10-08T21:57:38.973Z", "version": "extractDocs.js@commit:350f56b7df8d" }, "docTitle": "Deprecating TLS 1.0 and TLS 1.1", "docTitle$meta": { "confidence": "high", "note": "Parsed from RFC index XML title", "originalValue": null, "source": "parsed", "sourceUrl": "https://www.rfc-editor.org/info/rfc8996/", "updated": "2026-10-08T21:57:38.973Z", "version": "extractDocs.js@commit:350f56b7df8d" }, "docType": "Best Practice", "docType$meta": { "confidence": "high", "note": "Mapped from Datatracker std_level or RFC status text", "originalValue": null, "source": "parsed", "sourceUrl": "https://www.rfc-editor.org/info/rfc8996/", "updated": "2026-10-08T21:57:38.973Z", "version": "extractDocs.js@commit:350f56b7df8d" }, "doi": "10.17487/RFC8996", "doi$meta": { "confidence": "high", "note": "Parsed from RFC index XML doi", "originalValue": null, "source": "resolved", "sourceUrl": "https://www.rfc-editor.org/info/rfc8996/", "updated": "2026-10-08T21:57:38.973Z", "version": "extractDocs.js@commit:350f56b7df8d" }, "href": "https://doi.org/10.17487/RFC8996", "href$meta": { "confidence": "high", "note": "Derived from DOI (https://doi.org/)", "originalValue": null, "source": "resolved", "sourceUrl": "https://www.rfc-editor.org/info/rfc8996/", "updated": "2026-10-08T21:57:38.973Z", "version": "extractDocs.js@commit:350f56b7df8d" }, "keywords": [ "TLS", "TLSv1.0", "TLSv1.1" ], "keywords$meta": { "confidence": "high", "note": "Parsed from RFC index XML keywords", "originalValue": null, "source": "parsed", "sourceUrl": "https://www.rfc-editor.org/info/rfc8996/", "updated": "2026-10-08T21:57:38.973Z", "version": "extractDocs.js@commit:350f56b7df8d" }, "pages": "18", "pages$meta": { "confidence": "high", "note": "Parsed from RFC index XML page-count", "originalValue": null, "source": "parsed", "sourceUrl": "https://www.rfc-editor.org/info/rfc8996/", "updated": "2026-10-08T21:57:38.973Z", "version": "extractDocs.js@commit:350f56b7df8d" }, "publicationDate": "2021-03-01", "publicationDate$meta": { "confidence": "high", "note": "Parsed from RFC index XML date", "originalValue": null, "source": "parsed", "sourceUrl": "https://www.rfc-editor.org/info/rfc8996/", "updated": "2026-10-08T21:57:38.973Z", "version": "extractDocs.js@commit:350f56b7df8d" }, "publisher": "IETF", "publisher$meta": { "confidence": "high", "note": "Static: provider", "originalValue": null, "source": "parsed", "sourceUrl": "https://www.rfc-editor.org/info/rfc8996/", "updated": "2026-10-08T21:57:38.973Z", "version": "extractDocs.js@commit:350f56b7df8d" }, "references": { "bibliographic": [ "10.14722-ndss.2016.23418", "NIST.SP.800-52r2", "RFC3316", "RFC3489", "RFC3546", "RFC3588", "RFC3734", "RFC3920", "RFC4132", "RFC4244", "RFC4347", "RFC4366", "RFC4492", "RFC4507", "RFC4572", "RFC4934", "RFC5077", "RFC5081", "RFC5101", "RFC5246", "RFC5415", "RFC5456", "RFC6012", "RFC6083", "RFC6084", "RFC6347", "RFC6460", "RFC6614", "RFC7457", "RFC8143", "RFC8261", "RFC8446", "RFC8447" ], "bibliographic$meta": { "confidence": "high", "note": "Parsed from RFC HTML references/informative sections", "originalValue": [], "source": "parsed", "sourceUrl": "https://www.rfc-editor.org/info/rfc8996/", "updated": "2026-10-08T21:57:38.974Z", "version": "extractDocs.js@commit:350f56b7df8d" }, "normative": [ "RFC2119", "RFC2246", "RFC3261", "RFC3329", "RFC3436", "RFC3470", "RFC3501", "RFC3552", "RFC3568", "RFC3656", "RFC3749", "RFC3767", "RFC3856", "RFC3871", "RFC3887", "RFC3903", "RFC3943", "RFC3983", "RFC4097", "RFC4111", "RFC4162", "RFC4168", "RFC4217", "RFC4235", "RFC4261", "RFC4279", "RFC4346", "RFC4497", "RFC4513", "RFC4531", "RFC4540", "RFC4582", "RFC4616", "RFC4642", "RFC4680", "RFC4681", "RFC4712", "RFC4732", "RFC4743", "RFC4744", "RFC4785", "RFC4791", "RFC4823", "RFC4851", "RFC4964", "RFC4975", "RFC4976", "RFC4992", "RFC5018", "RFC5019", "RFC5023", "RFC5024", "RFC5049", "RFC5054", "RFC5091", "RFC5158", "RFC5216", "RFC5238", "RFC5263", "RFC5281", "RFC5364", "RFC5422", "RFC5469", "RFC5734", "RFC5878", "RFC5953", "RFC6042", "RFC6176", "RFC6353", "RFC6367", "RFC6739", "RFC6749", "RFC6750", "RFC7030", "RFC7465", "RFC7507", "RFC7525", "RFC7562", "RFC7568", "RFC8174", "RFC8422" ], "normative$meta": { "confidence": "high", "note": "Parsed from RFC HTML normative references sections", "originalValue": [], "source": "parsed", "sourceUrl": "https://www.rfc-editor.org/info/rfc8996/", "updated": "2026-10-08T21:57:38.973Z", "version": "extractDocs.js@commit:350f56b7df8d" } }, "resolvedHref": "https://www.rfc-editor.org/info/rfc8996/", "resolvedHref$meta": { "confidence": "high", "note": "Final URL resolved via URL redirect verification", "originalValue": null, "source": "resolved", "sourceUrl": "https://www.rfc-editor.org/info/rfc8996/", "updated": "2026-10-08T21:57:38.973Z", "version": "extractDocs.js@commit:350f56b7df8d" }, "status": { "active": true, "active$meta": { "confidence": "high", "note": "Derived from supersession relationship fields", "originalValue": null, "source": "resolved", "sourceUrl": "https://www.rfc-editor.org/info/rfc8996/", "updated": "2026-10-08T21:57:38.973Z", "version": "extractDocs.js@commit:350f56b7df8d" }, "amends": [ "RFC3261", "RFC3329", "RFC3436", "RFC3470", "RFC3501", "RFC3552", "RFC3568", "RFC3656", "RFC3749", "RFC3767", "RFC3856", "RFC3871", "RFC3887", "RFC3903", "RFC3943", "RFC3983", "RFC4097", "RFC4111", "RFC4162", "RFC4168", "RFC4217", "RFC4235", "RFC4261", "RFC4279", "RFC4497", "RFC4513", "RFC4531", "RFC4540", "RFC4582", "RFC4616", "RFC4642", "RFC4680", "RFC4681", "RFC4712", "RFC4732", "RFC4743", "RFC4744", "RFC4785", "RFC4791", "RFC4823", "RFC4851", "RFC4964", "RFC4975", "RFC4976", "RFC4992", "RFC5018", "RFC5019", "RFC5023", "RFC5024", "RFC5049", "RFC5054", "RFC5091", "RFC5158", "RFC5216", "RFC5238", "RFC5263", "RFC5281", "RFC5364", "RFC5415", "RFC5422", "RFC5456", "RFC5734", "RFC5878", "RFC5953", "RFC6012", "RFC6042", "RFC6083", "RFC6084", "RFC6176", "RFC6347", "RFC6353", "RFC6367", "RFC6460", "RFC6614", "RFC6739", "RFC6749", "RFC6750", "RFC7030", "RFC7465", "RFC7525", "RFC7562", "RFC7568", "RFC8261", "RFC8422" ], "amends$meta": { "confidence": "high", "note": "Parsed from RFC index XML", "originalValue": [], "source": "parsed", "sourceUrl": "https://www.rfc-editor.org/info/rfc8996/", "updated": "2026-10-08T21:57:38.974Z", "version": "extractDocs.js@commit:350f56b7df8d" }, "errataExist": true, "errataExist$meta": { "confidence": "high", "note": "Derived from presence of errata links on RFC/Datatracker pages", "originalValue": null, "source": "parsed", "sourceUrl": "https://www.rfc-editor.org/info/rfc8996/", "updated": "2026-10-08T21:57:38.973Z", "version": "extractDocs.js@commit:350f56b7df8d" }, "errataUrl": [ "https://www.rfc-editor.org/errata/rfc8996", "https://www.rfc-editor.org/errata_search.php?rfc=8996", "https://www.rfc-editor.org/rfc/inline-errata/rfc8996.html" ], "errataUrl$meta": { "confidence": "high", "note": "Parsed from errata links on RFC/Datatracker pages", "originalValue": [], "source": "parsed", "sourceUrl": "https://www.rfc-editor.org/info/rfc8996/", "updated": "2026-10-08T21:57:38.974Z", "version": "extractDocs.js@commit:350f56b7df8d" }, "latestVersion": true, "latestVersion$meta": { "confidence": "high", "note": "Derived from supersession relationship fields", "originalValue": null, "source": "resolved", "sourceUrl": "https://www.rfc-editor.org/info/rfc8996/", "updated": "2026-10-08T21:57:38.973Z", "version": "extractDocs.js@commit:350f56b7df8d" }, "statusNote": "Best Current Practice", "statusNote$meta": { "confidence": "high", "note": "Mapped from Datatracker doc.json std_level", "originalValue": null, "source": "parsed", "sourceUrl": "https://www.rfc-editor.org/info/rfc8996/", "updated": "2026-10-08T21:57:38.973Z", "version": "extractDocs.js@commit:350f56b7df8d" }, "superseded": false, "superseded$meta": { "confidence": "high", "note": "Derived from supersession relationship fields", "originalValue": null, "source": "resolved", "sourceUrl": "https://www.rfc-editor.org/info/rfc8996/", "updated": "2026-10-08T21:57:38.973Z", "version": "extractDocs.js@commit:350f56b7df8d" }, "supersedes": [ "RFC5469", "RFC7507" ], "supersedes$meta": { "confidence": "high", "note": "Parsed from RFC index XML", "originalValue": [], "source": "parsed", "sourceUrl": "https://www.rfc-editor.org/info/rfc8996/", "updated": "2026-10-08T21:57:38.974Z", "version": "extractDocs.js@commit:350f56b7df8d" } } } }