attachment
<br><div class="gmail_quote">---------- Forwarded message ----------<br>From: <b class="gmail_sendername">The IESG</b> <span dir="ltr"><<a href="mailto:iesg-secretary@ietf.org">iesg-secretary@ietf.org</a>></span><br>Date: Mon, Apr 13, 2015 at 2:02 PM<br>Subject: [TLS] Protocol Action: 'Deprecating Secure Sockets Layer Version 3.0' to Best Current Practice (draft-ietf-tls-sslv3-diediedie-03.txt)<br>To: IETF-Announce <<a href="mailto:ietf-announce@ietf.org">ietf-announce@ietf.org</a>><br>Cc: tls mailing list <<a href="mailto:tls@ietf.org">tls@ietf.org</a>>, tls chair <<a href="mailto:tls-chairs@tools.ietf.org">tls-chairs@tools.ietf.org</a>>, RFC Editor <<a href="mailto:rfc-editor@rfc-editor.org">rfc-editor@rfc-editor.org</a>><br><br><br>The IESG has approved the following document:<br>
- 'Deprecating Secure Sockets Layer Version 3.0'<br>
(draft-ietf-tls-sslv3-diediedie-03.txt) as Best Current Practice<br>
<br>
This document is the product of the Transport Layer Security Working<br>
Group.<br>
<br>
The IESG contact persons are Stephen Farrell and Kathleen Moriarty.<br>
<br>
A URL of this Internet Draft is:<br>
<a href="http://datatracker.ietf.org/doc/draft-ietf-tls-sslv3-diediedie/" target="_blank">http://datatracker.ietf.org/doc/draft-ietf-tls-sslv3-diediedie/</a><br>
<br>
<br>
<br>
<br>
<br>
Technical Summary<br>
<br>
Secure Sockets Layer version 3.0 (SSLv3) is no longer secure. This<br>
document requires that SSLv3 not be used. The replacement versions,<br>
in particular Transport Layer Security (TLS) 1.2, are considerably<br>
more secure and capable protocols.<br>
<br>
This document updates the backward compatibility sections of the TLS<br>
RFCs to prohibit fallback to SSLv3.<br>
<br>
Working Group Summary<br>
<br>
This document has been actively reviewed by the TLS working<br>
group. There is strong community consensus behind the document.<br>
<br>
Document Quality<br>
<br>
Are there existing implementations of the protocol? Yes, and<br>
that's the problem;-) However, many deployments and<br>
implementations have already started disabling SSLv3.<br>
<br>
Personnel<br>
<br>
Joseph Salowey is the document shepherd.<br>
Stephen Farrell is the responsible AD for this document.<br>
<br>
_______________________________________________<br>
TLS mailing list<br>
<a href="mailto:TLS@ietf.org">TLS@ietf.org</a><br>
<a href="https://www.ietf.org/mailman/listinfo/tls" target="_blank">https://www.ietf.org/mailman/listinfo/tls</a><br>
</div><br>