Skip to main content

Deprecating FFDH(E) Ciphersuites in TLS

Document Type Expired Internet-Draft (candidate for tls WG)
Authors Carrick , Nimrod Aviram , Filippo Valsorda
Last updated 2021-08-28 (Latest revision 2021-02-24)
Stream Internet Engineering Task Force (IETF)
Expired & archived
Stream WG state Call For Adoption By WG Issued
Document shepherd (None)
IESG IESG state Expired
Consensus boilerplate Unknown
Telechat date (None)
Responsible AD (None)
Send notices to (None)
This Internet-Draft is no longer active. A copy of the expired Internet-Draft can be found at:


This document deprecates and discourages use of finite field and elliptic curve Diffie Hellman cipher suites that have known vulnerabilities or improper security properties when implemented incorrectly.


Nimrod Aviram
Filippo Valsorda

(Note: The e-mail addresses provided for the authors of this Internet-Draft may no longer be valid.)