API Build-data JSON Resources
Theme

Choose how MSRBot.io looks on this device.

Auto (match system) Light mode Dark mode

Preference is stored in this browser only.

IETF RFC 8996
[ACTIVE]

Deprecating TLS 1.0 and TLS 1.1

Metadata

Publisher
IETF
Doc Type
Best Practice
Pages
18
Abstract
This document formally deprecates Transport Layer Security (TLS) versions 1.0 (RFC 2246) and 1.1 (RFC 4346). Accordingly, those documents have been moved to Historic status. These versions lack support for current and recommended cryptographic algorithms and mechanisms, and various government and industry profiles of applications using TLS now mandate avoiding these old TLS versions. TLS version 1.2 became the recommended version for IETF protocols in 2008 (subsequently being obsoleted by TLS version 1.3 in 2018), providing sufficient time to transition away from older versions. Removing support for older versions from implementations reduces the attack surface, reduces opportunity for misconfiguration, and streamlines library and product maintenance. This document also deprecates Datagram TLS (DTLS) version 1.0 (RFC 4347) but not DTLS version 1.2, and there is no DTLS version 1.1. This document updates many RFCs that normatively refer to TLS version 1.0 or TLS version 1.1, as described herein. This document also updates the best practices for TLS usage in RFC 7525; hence, it is part of BCP 195.
Publication Date
2021-03-01
Status Note
Best Current Practice
DOI
10.17487/RFC8996
Link
https://doi.org/10.17487/RFC8996
Author(s)
Kathleen Moriarty
Stephen Farrell
Keyword(s)
TLS, TLSv1.0, TLSv1.1
Latest version of IETF RFC 8996

Document Versions — IETF RFC 8996

  • ▶ IETF RFC 8996 (2021-03-01)
    THIS DOC [ACTIVE] [LATEST VERSION]

Normative Reference(s)

Bibliographic Reference(s)

Source Data (JSON)

Full registry record with provenance metadata. Open directly: /api/doc/RFC8996.json

Reference Tree

Explore all references and references to this document, as a navigable tree.

Open Reference Tree
Reference this Doc

Plain text (ISO 690 compliant)

Preview:
IETF RFC 8996, Deprecating TLS 1.0 and TLS 1.1. Available at https://doi.org/10.17487/RFC8996
Snippet:
IETF RFC 8996, Deprecating TLS 1.0 and TLS 1.1. Available at https://doi.org/10.17487/RFC8996

HTML (ISO 690 compliant)

Preview:
IETF RFC 8996, Deprecating TLS 1.0 and TLS 1.1. Available at https://doi.org/10.17487/RFC8996
Snippet:
<span class="citation"><cite>IETF RFC 8996</cite>, Deprecating TLS 1.0 and TLS 1.1. Available at <a href="https://doi.org/10.17487/RFC8996" target="_blank" rel="noopener">https://doi.org/10.17487/RFC8996</a></span>

SMPTE Icon SMPTE's HTML Pub

Preview:
IETF RFC 8996, Deprecating TLS 1.0 and TLS 1.1
doi: 10.17487/RFC8996
url: https://doi.org/10.17487/RFC8996
Snippet:
<li>
<cite id="bib-rfc8996">IETF RFC 8996</cite>, Deprecating TLS 1.0 and TLS 1.1
<span class="doi">10.17487/RFC8996</span>
</li>

Referenced By