Deprecating Secure Sockets Layer Version 3.0

Metadata

Publisher: IETF
Doc Type: Standard
Pages: 7
Abstract: The Secure Sockets Layer version 3.0 (SSLv3), as specified in RFC 6101, is not sufficiently secure. This document requires that SSLv3 not be used. The replacement versions, in particular, Transport Layer Security (TLS) 1.2 (RFC 5246), are considerably more secure and capable protocols. This document updates the backward compatibility section of RFC 5246 and its predecessors to prohibit fallback to SSLv3.
Publication Date: 2015-06-01
Status Note: Proposed Standard
DOI: 10.17487/RFC7568
Link: https://doi.org/10.17487/RFC7568
Author(s): Richard Barnes
Martin Thomson
Alfredo Pironti
Adam Langley
Keyword(s): SSL, TLS

Latest version of IETF RFC 7568

Document Versions — IETF RFC 7568

▶ IETF RFC 7568 (2015-06-01)

THIS DOC [ACTIVE] [LATEST VERSION]

Amended by:

IETF RFC 8996 [Active*]

Normative Reference(s)

IETF RFC 2119 [Active*]
IETF RFC 2246 [Superseded*]
IETF RFC 4346 [Superseded*]
IETF RFC 5246 [Superseded*]
IETF RFC 6101 [Active*]
IETF RFC 7366 [Active*]
IETF RFC 7465 [Active*]

Bibliographic Reference(s)

NIST FIPS 180-4 [Active]
Bhargavan, K., Delignat-Lavaud, A., Fournet, C., Pironti, A., and P-Y. Strub, "Triple Handshakes and Cookie Cutters: Breaking and Fixing Authentication over TLS", IEEE Symposium on Security and Privacy, 2014. EXTERNAL
Moeller, B., "This POODLE bites: exploiting the SSL 3.0 fallback", October 2014, < http://googleonlinesecurity.blogspot.com/2014/10/ this-poodle-bites-exploiting-ssl-30.html >. EXTERNAL
IETF RFC 1321 [Active*]
IETF RFC 3174 [Active, Amended*]
IETF RFC 4492 [Superseded*]
IETF RFC 5077 [Superseded*]
IETF RFC 5746 [Active*]
IETF RFC 6176 [Active*]
IETF RFC 6347 [Superseded*]
IETF RFC 7301 [Active*]

Source Data (JSON)

Full registry record with provenance metadata. Open directly: /api/doc/RFC7568.json

Reference Tree

Explore all references and references to this document, as a navigable tree.

Open Reference Tree

Reference this Doc

Plain text (ISO 690 compliant)

Preview:

IETF RFC 7568, Deprecating Secure Sockets Layer Version 3.0. Available at https://doi.org/10.17487/RFC7568

Snippet:

IETF RFC 7568, Deprecating Secure Sockets Layer Version 3.0. Available at https://doi.org/10.17487/RFC7568

HTML (ISO 690 compliant)

Preview:

IETF RFC 7568, Deprecating Secure Sockets Layer Version 3.0. Available at https://doi.org/10.17487/RFC7568

Snippet:

<span class="citation"><cite>IETF RFC 7568</cite>, Deprecating Secure Sockets Layer Version 3.0. Available at <a href="https://doi.org/10.17487/RFC7568" target="_blank" rel="noopener">https://doi.org/10.17487/RFC7568</a></span>

SMPTE's HTML Pub

Preview:

IETF RFC 7568, Deprecating Secure Sockets Layer Version 3.0
doi: 10.17487/RFC7568
url: https://doi.org/10.17487/RFC7568

Snippet:

<li>
<cite id="bib-rfc7568">IETF RFC 7568</cite>, Deprecating Secure Sockets Layer Version 3.0
<span class="doi">10.17487/RFC7568</span>
</li>

Referenced By

IETF RFC 7627 [Superseded*]
IETF RFC 7925 [Active*]
IETF RFC 8446 [Superseded*]
IETF RFC 8996 [Active*]