Skip to main content

Deprecating TLS 1.0 and TLS 1.1
RFC 8996 part of BCP 195

Revision differences

Document history

Date By Action
2024-01-17
(System) Received changes through RFC Editor sync (added Verified Errata tag)
2023-12-12
(System) Imported membership of rfc8996 in bcp195 via sync to the rfc-index
2023-12-12
(System) No history of BCP195 is currently available in the datatracker before this point
2021-03-25
(System) Received changes through RFC Editor sync (added Errata tag)
2021-03-23
(System)
Received changes through RFC Editor sync (created alias RFC 8996, changed title to 'Deprecating TLS 1.0 and TLS 1.1', changed abstract to 'This document …
Received changes through RFC Editor sync (created alias RFC 8996, changed title to 'Deprecating TLS 1.0 and TLS 1.1', changed abstract to 'This document formally deprecates Transport Layer Security (TLS) versions 1.0 (RFC 2246) and 1.1 (RFC 4346). Accordingly, those documents have been moved to Historic status. These versions lack support for current and recommended cryptographic algorithms and mechanisms, and various government and industry profiles of applications using TLS now mandate avoiding these old TLS versions. TLS version 1.2 became the recommended version for IETF protocols in 2008 (subsequently being obsoleted by TLS version 1.3 in 2018), providing sufficient time to transition away from older versions. Removing support for older versions from implementations reduces the attack surface, reduces opportunity for misconfiguration, and streamlines library and product maintenance.

This document also deprecates Datagram TLS (DTLS) version 1.0 (RFC 4347) but not DTLS version 1.2, and there is no DTLS version 1.1.

This document updates many RFCs that normatively refer to TLS version 1.0 or TLS version 1.1, as described herein. This document also updates the best practices for TLS usage in RFC 7525; hence, it is part of BCP 195.', changed pages to 18, changed standardization level to Best Current Practice, changed state to RFC, added RFC published event at 2021-03-23, changed IESG state to RFC Published, created obsoletes relation between draft-ietf-tls-oldversions-deprecate and RFC 5469, created obsoletes relation between draft-ietf-tls-oldversions-deprecate and RFC 7507, created updates relation between draft-ietf-tls-oldversions-deprecate and RFC 3261, created updates relation between draft-ietf-tls-oldversions-deprecate and RFC 3329, created updates relation between draft-ietf-tls-oldversions-deprecate and RFC 3436, created updates relation between draft-ietf-tls-oldversions-deprecate and RFC 3470, created updates relation between draft-ietf-tls-oldversions-deprecate and RFC 3501, created updates relation between draft-ietf-tls-oldversions-deprecate and RFC 3552, created updates relation between draft-ietf-tls-oldversions-deprecate and RFC 3568, created updates relation between draft-ietf-tls-oldversions-deprecate and RFC 3656, created updates relation between draft-ietf-tls-oldversions-deprecate and RFC 3749, created updates relation between draft-ietf-tls-oldversions-deprecate and RFC 3767, created updates relation between draft-ietf-tls-oldversions-deprecate and RFC 3856, created updates relation between draft-ietf-tls-oldversions-deprecate and RFC 3871, created updates relation between draft-ietf-tls-oldversions-deprecate and RFC 3887, created updates relation between draft-ietf-tls-oldversions-deprecate and RFC 3903, created updates relation between draft-ietf-tls-oldversions-deprecate and RFC 3943, created updates relation between draft-ietf-tls-oldversions-deprecate and RFC 3983, created updates relation between draft-ietf-tls-oldversions-deprecate and RFC 4097, created updates relation between draft-ietf-tls-oldversions-deprecate and RFC 4111, created updates relation between draft-ietf-tls-oldversions-deprecate and RFC 4162, created updates relation between draft-ietf-tls-oldversions-deprecate and RFC 4168, created updates relation between draft-ietf-tls-oldversions-deprecate and RFC 4217, created updates relation between draft-ietf-tls-oldversions-deprecate and RFC 4235, created updates relation between draft-ietf-tls-oldversions-deprecate and RFC 4261, created updates relation between draft-ietf-tls-oldversions-deprecate and RFC 4279, created updates relation between draft-ietf-tls-oldversions-deprecate and RFC 4497, created updates relation between draft-ietf-tls-oldversions-deprecate and RFC 4513, created updates relation between draft-ietf-tls-oldversions-deprecate and RFC 4531, created updates relation between draft-ietf-tls-oldversions-deprecate and RFC 4540, created updates relation between draft-ietf-tls-oldversions-deprecate and RFC 4582, created updates relation between draft-ietf-tls-oldversions-deprecate and RFC 4616, created updates relation between draft-ietf-tls-oldversions-deprecate and RFC 4642, created updates relation between draft-ietf-tls-oldversions-deprecate and RFC 4680, created updates relation between draft-ietf-tls-oldversions-deprecate and RFC 4681, created updates relation between draft-ietf-tls-oldversions-deprecate and RFC 4712, created updates relation between draft-ietf-tls-oldversions-deprecate and RFC 4732, created updates relation between draft-ietf-tls-oldversions-deprecate and RFC 4743, created updates relation between draft-ietf-tls-oldversions-deprecate and RFC 4744, created updates relation between draft-ietf-tls-oldversions-deprecate and RFC 4785, created updates relation between draft-ietf-tls-oldversions-deprecate and RFC 4791, created updates relation between draft-ietf-tls-oldversions-deprecate and RFC 4823, created updates relation between draft-ietf-tls-oldversions-deprecate and RFC 4851, created updates relation between draft-ietf-tls-oldversions-deprecate and RFC 4964, created updates relation between draft-ietf-tls-oldversions-deprecate and RFC 4975, created updates relation between draft-ietf-tls-oldversions-deprecate and RFC 4976, created updates relation between draft-ietf-tls-oldversions-deprecate and RFC 4992, created updates relation between draft-ietf-tls-oldversions-deprecate and RFC 5018, created updates relation between draft-ietf-tls-oldversions-deprecate and RFC 5019, created updates relation between draft-ietf-tls-oldversions-deprecate and RFC 5023, created updates relation between draft-ietf-tls-oldversions-deprecate and RFC 5024, created updates relation between draft-ietf-tls-oldversions-deprecate and RFC 5049, created updates relation between draft-ietf-tls-oldversions-deprecate and RFC 5054, created updates relation between draft-ietf-tls-oldversions-deprecate and RFC 5091, created updates relation between draft-ietf-tls-oldversions-deprecate and RFC 5158, created updates relation between draft-ietf-tls-oldversions-deprecate and RFC 5216, created updates relation between draft-ietf-tls-oldversions-deprecate and RFC 5238, created updates relation between draft-ietf-tls-oldversions-deprecate and RFC 5263, created updates relation between draft-ietf-tls-oldversions-deprecate and RFC 5281, created updates relation between draft-ietf-tls-oldversions-deprecate and RFC 5364, created updates relation between draft-ietf-tls-oldversions-deprecate and RFC 5415, created updates relation between draft-ietf-tls-oldversions-deprecate and RFC 5422, created updates relation between draft-ietf-tls-oldversions-deprecate and RFC 5456, created updates relation between draft-ietf-tls-oldversions-deprecate and RFC 5734, created updates relation between draft-ietf-tls-oldversions-deprecate and RFC 5878, created updates relation between draft-ietf-tls-oldversions-deprecate and RFC 5953, created updates relation between draft-ietf-tls-oldversions-deprecate and RFC 6012, created updates relation between draft-ietf-tls-oldversions-deprecate and RFC 6042, created updates relation between draft-ietf-tls-oldversions-deprecate and RFC 6083, created updates relation between draft-ietf-tls-oldversions-deprecate and RFC 6084, created updates relation between draft-ietf-tls-oldversions-deprecate and RFC 6176, created updates relation between draft-ietf-tls-oldversions-deprecate and RFC 6347, created updates relation between draft-ietf-tls-oldversions-deprecate and RFC 6353, created updates relation between draft-ietf-tls-oldversions-deprecate and RFC 6367, created updates relation between draft-ietf-tls-oldversions-deprecate and RFC 6460, created updates relation between draft-ietf-tls-oldversions-deprecate and RFC 6614, created updates relation between draft-ietf-tls-oldversions-deprecate and RFC 6739, created updates relation between draft-ietf-tls-oldversions-deprecate and RFC 6749, created updates relation between draft-ietf-tls-oldversions-deprecate and RFC 6750, created updates relation between draft-ietf-tls-oldversions-deprecate and RFC 7030, created updates relation between draft-ietf-tls-oldversions-deprecate and RFC 7465, created updates relation between draft-ietf-tls-oldversions-deprecate and RFC 7525, created updates relation between draft-ietf-tls-oldversions-deprecate and RFC 7562, created updates relation between draft-ietf-tls-oldversions-deprecate and RFC 7568, created updates relation between draft-ietf-tls-oldversions-deprecate and RFC 8261, created updates relation between draft-ietf-tls-oldversions-deprecate and RFC 8422)
2021-03-23
(System) RFC published