RFC 10015: Deprecating Obsolete Key Exchange Methods in TLS 1.2 and DTLS 1.2
The IETF has published RFC 10015, which deprecates obsolete key exchange methods like RSA and finite-field Diffie-Hellman in TLS 1.2 and DTLS 1.2. This update aims to improve internet security by phasing out weaker cryptographic standards.
Why it matters
This is a critical update for network security professionals and developers to ensure their systems remain compliant with modern security standards.
For (D)TLS 1.2, this document deprecates the use of two key exchanges, namely Diffie-Hellman (DH) over a finite field and RSA. It also discourages the use of static Elliptic Curve Diffie-Hellman (ECDH) cipher suites. ¶
Technical documentation reporting on industry standards without editorializing.
Get smarter about the news
Sign up free for a feed built around what you actually care about, Dive Deeper research on any story, and the full text of every article.
Create free accountAlready have an account? Sign in