IPFYI
RFC 8446 Proposed Standard

The Transport Layer Security (TLS) Protocol Version 1.3

E. Rescorla · 2018-08

Abstract

This document specifies version 1.3 of the Transport Layer Security (TLS) protocol. TLS allows client/server applications to communicate over the Internet in a way that is designed to prevent eavesdropping, tampering, and message forgery. This document updates RFCs 5705 and 6066, and obsoletes RFCs 5077, 5246, and 6961.

Why This RFC Matters

RFC 8446 represents the most significant redesign of TLS in the protocol's history, reducing the full handshake to one round trip (and zero round trips for session resumption with 0-RTT), eliminating all cipher suites without forward secrecy, removing RSA key exchange, retiring RC4/3DES/SHA-1, and encrypting the server certificate to prevent passive observer enumeration of server identities. TLS 1.3 adoption accelerated rapidly after publication and is now the preferred version for virtually all new HTTPS deployments; browsers and CDNs have deprecated TLS 1.0/1.1 in compliance with CA/B Forum and IETF recommendations, making TLS 1.2 and 1.3 the only practically deployed versions.

Supersession Chain

관련 프로토콜

SSL-TLS HTTPS TCP

관련 용어

ssl-tls encryption certificate hsts authentication

Security에서 더 보기

RFC 2404 The Use of HMAC-SHA-1-96 within ESP and AH RFC 3602 The AES-CBC Cipher Algorithm and Its Use with IPsec RFC 4253 The Secure Shell (SSH) Transport Layer Protocol RFC 4254 The Secure Shell (SSH) Connection Protocol RFC 4301 Security Architecture for the Internet Protocol RFC 5246 The Transport Layer Security (TLS) Protocol Version 1.2 RFC 5280 Internet X.509 Public Key Infrastructure Certificate and CRL Profile RFC 6125 Representation and Verification of Domain-Based Application Service Identity within Internet Public Key Infrastructure Using X.509 (PKIX) Certificates in the Context of Transport Layer Security (TLS)