RFC 10015: Deprecating Obsolete Key Exchange Methods in TLS 1.2 and DTLS 1.2

For (D)TLS 1.2, this document deprecates the use of two key exchanges, namely Diffie-Hellman (DH) over a finite field and RSA. It also discourages the use of…

Read RFC 10015 on the RFC Editor

Outgoing relationships (17 related RFCs)

Updates — RFC 5246: The Transport Layer Security (TLS) Protocol Version 1.2
Updates — RFC 6347: Datagram Transport Layer Security Version 1.2
Updates — RFC 4346: The Transport Layer Security (TLS) Protocol Version 1.1
Updates — RFC 4279: Pre-Shared Key Ciphersuites for Transport Layer Security (TLS)
Updates — RFC 9325: Recommendations for Secure Use of Transport Layer Security (TLS) and Datagram Transport Layer Security (DTLS)
Updates — RFC 5288: AES Galois Counter Mode (GCM) Cipher Suites for TLS
Updates — RFC 5289: TLS Elliptic Curve Cipher Suites with SHA-256/384 and AES Galois Counter Mode (GCM)
Updates — RFC 8422: Elliptic Curve Cryptography (ECC) Cipher Suites for Transport Layer Security (TLS) Versions 1.2 and Earlier
Updates — RFC 4785: Pre-Shared Key (PSK) Ciphersuites with NULL Encryption for Transport Layer Security (TLS)
Updates — RFC 5487: Pre-Shared Key Cipher Suites for TLS with SHA-256/384 and AES Galois Counter Mode
Updates — RFC 6655: AES-CCM Cipher Suites for Transport Layer Security (TLS)
Updates — RFC 5469: DES and IDEA Cipher Suites for Transport Layer Security (TLS)
Updates — RFC 4162: Addition of SEED Cipher Suites to Transport Layer Security (TLS)
Updates — RFC 6367: Addition of the Camellia Cipher Suites to Transport Layer Security (TLS)
Updates — RFC 5932: Camellia Cipher Suites for TLS
Updates — RFC 6209: Addition of the ARIA Cipher Suites to Transport Layer Security (TLS)
Updates — RFC 7905: ChaCha20-Poly1305 Cipher Suites for Transport Layer Security (TLS)