IETF RFC 9852
[ACTIVE]
New Protocols Using TLS Must Require TLS 1.3
Metadata
- Publisher
- IETF
- Doc Type
- Best Practice
- Pages
- 7
- Abstract
- TLS 1.3 is widely used, has had comprehensive security proofs, and improves both security and privacy deficiencies in TLS 1.2. Therefore, new protocols that use TLS must require TLS 1.3. As DTLS 1.3 is not widely available or deployed, this prescription does not pertain to DTLS (in any DTLS version); it pertains to TLS only. This document updates RFC 9325. It discusses post-quantum cryptography and the security and privacy improvements in TLS 1.3 as the rationale for the update.
- Publication Date
- 2026-07-01
- Status Note
- Best Current Practice
- DOI
10.17487/RFC9852- Link
- https://doi.org/10.17487/RFC9852
- Author(s)
- Rich SalzNimrod Aviram
- Keyword(s)
- TLS, Interoperability
Latest version of IETF RFC 9852
Document Versions — IETF RFC 9852
-
▶ IETF RFC 9852 (2026-07-01)THIS DOC [ACTIVE] [LATEST VERSION]
Normative Reference(s)
- IETF RFC 2119 [Active*]
- IETF RFC 5246 [Superseded*]
- IETF RFC 8174 [Active*]
- IETF RFC 9325 [Active*]
- IETF RFC 9846 [Active*]
- RFC9851 — RFC9851 EXTERNAL
Bibliographic Reference(s)
- 10.1145-2810103.2813707 — Logjam EXTERNAL
- 10.1145-2976749.2978411 — LUCKY13FIX EXTERNAL
- 10.14722-ndss.2016.23418 — TRANSCRIPTION EXTERNAL
- Al Fardan, N. J. and K. G. Paterson, "Lucky Thirteen: Breaking the TLS and DTLS record protocols", February 2013, <http://www.isg.rhul.ac.uk/tls/TLStiming.pdf>. EXTERNAL
- NIST, "What Is Post-Quantum Cryptography?", June 2025, <https://www.nist.gov/cybersecurity/what-post-quantum-cryptography>. EXTERNAL
- Merget, R., Somorovsky, J., Aviram, N., Young, C., Fliegenschmidt, J., Schwenk, J., and Y. Shavitt, "Scalable Scanning and Automatic Classification of TLS Padding Oracle Vulnerabilities", 28th USENIX Security Symposium (USENIX Security 19), August 2019, <https://www.usenix.org/system/files/sec19-merget.pdf>. EXTERNAL
- Beurdouche, B., Bhargavan, K., Delignat-Lavaud, A., Fournet, C., Kohlweiss, M., Pironti, A., Strub, P.-Y., and J. K. Zinzindohoue, "A Messy State of the Union: Taming the Composite State Machines of TLS", IEEE Symposium on Security & Privacy 2015, HAL ID: hal-01114250, May 2015, <https://inria.hal.science/hal-01114250/file/messy-state-of-the-union-oakland15.pdf>. EXTERNAL
- "Triple Handshakes Considered Harmful: Breaking and Fixing Authentication over TLS", Wayback Machine archive, <https://web.archive.org/web/20250804151857/https://mitls.org/pages/attacks/3SHAKE>. EXTERNAL
- Rescorla, E., "Understanding the TLS Renegotiation Attack", Wayback Machine archive, 5 November 2009, <https://web.archive.org/web/20091231034700/http://www.educatedguesswork.org/2009/11/understanding_the_tls_renegoti.html>. EXTERNAL
- Ray, M., "Authentication Gap in TLS Renegotiation", Wayback Machine archive, <https://web.archive.org/web/20091228061844/http://extendedsubset.com/?p=8>. EXTERNAL
- Duong, T. and J. Rizzo, "Here Come the XOR Ninjas", May 2011, <http://www.hpcc.ecs.soton.ac.uk/dan/talks/bullrun/Beast.pdf>. EXTERNAL
- IETF RFC 5746 [Active*]
- IETF RFC 7465 [Active*]
- RFC8310 — RFC8310 EXTERNAL
- RFC9001 — QUIC-TLS EXTERNAL
- RFC9958 — RFC9958 EXTERNAL
- IETF RFC 10015 [Active*]
Source Data (JSON)
Full registry record with provenance metadata. Open directly: /api/doc/RFC9852.json
Reference Tree
Explore all references and references to this document, as a navigable tree.
Open Reference TreeReference this Doc
Plain text (ISO 690 compliant)
Preview:
IETF RFC 9852, New Protocols Using TLS Must Require TLS 1.3. Available at https://doi.org/10.17487/RFC9852
Snippet:
IETF RFC 9852, New Protocols Using TLS Must Require TLS 1.3. Available at https://doi.org/10.17487/RFC9852
HTML (ISO 690 compliant)
Preview:
IETF RFC 9852, New Protocols Using TLS Must Require TLS 1.3. Available at https://doi.org/10.17487/RFC9852
Snippet:
<span class="citation"><cite>IETF RFC 9852</cite>, New Protocols Using TLS Must Require TLS 1.3. Available at <a href="https://doi.org/10.17487/RFC9852" target="_blank" rel="noopener">https://doi.org/10.17487/RFC9852</a></span>
SMPTE's HTML Pub
Preview:
IETF RFC 9852, New Protocols Using TLS Must Require TLS 1.3
doi: 10.17487/RFC9852
url: https://doi.org/10.17487/RFC9852
doi: 10.17487/RFC9852
url: https://doi.org/10.17487/RFC9852
Snippet:
<li> <cite id="bib-rfc9852">IETF RFC 9852</cite>, New Protocols Using TLS Must Require TLS 1.3 <span class="doi">10.17487/RFC9852</span> </li>