Phasing out TLS 1.0/1.1 on IETF services
"Eric Vyncke (evyncke)" <evyncke@cisco.com> Fri, 24 June 2022 05:52 UTC
Return-Path: <evyncke@cisco.com>
X-Original-To: ietf@ietfa.amsl.com
Delivered-To: ietf@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 80CE5C15AAD4; Thu, 23 Jun 2022 22:52:01 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -9.607
X-Spam-Level:
X-Spam-Status: No, score=-9.607 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_BLOCKED=0.001, RCVD_IN_MSPIKE_H2=-0.001, SPF_NONE=0.001, T_SCC_BODY_TEXT_LINE=-0.01, URIBL_BLOCKED=0.001, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cisco.com header.b=G1vDy3f2; dkim=pass (1024-bit key) header.d=cisco.onmicrosoft.com header.b=xzIFzXZh
Received: from mail.ietf.org ([50.223.129.194]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id xz-GIA2fEHO3; Thu, 23 Jun 2022 22:51:57 -0700 (PDT)
Received: from alln-iport-6.cisco.com (alln-iport-6.cisco.com [173.37.142.93]) (using TLSv1.2 with cipher DHE-RSA-SEED-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id CC90BC15AAD2; Thu, 23 Jun 2022 22:51:56 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=8005; q=dns/txt; s=iport; t=1656049916; x=1657259516; h=from:to:subject:date:message-id:mime-version; bh=KCb62lNw6ASlNUUjXgk1QAummauspMKKqEZF9TO4kPQ=; b=G1vDy3f2ACNRGWqMI0C62QEPppMu1In3uHJYSfNMA5vW/IMSElRZUhjX pObD9BcFl+fK1oUcPnDiPWNrOKhrUKbtNkOCPEuIzFblodHufg7LA7IyK LWfntIO/l9BeU8wWKLVVGuL/KNR9CQ5EThxQ9ZUaPML5AR9IXzB1RoUSc 4=;
X-IPAS-Result: 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
IronPort-PHdr: A9a23:D/G28BUGXaiFvhjehy3ivDEGDO7V8K36AWYlg6HPw5pCcaWmqpLlO kGXpfBgl0TAUoiT7fVYw/HXvKbtVS1lg96BvXkOfYYKW0oDjsMbzAAlCdSOXEv8KvOiZicmH cNEAVli+XzzMUVcFMvkIVPIpXjn5j8JERK5Pg1wdYzI
IronPort-Data: A9a23:An2DF66G+c6OFReIONYS/QxRtCbHchMFZxGqfqrLsTDasY5as4F+v mMfXW+FPP/cM2P0KIwnb4S/9hsDsZLWndQ1QARu/ig8Zn8b8sCt6fZ1gavT04J+CuWZESqLO u1HMoGowPgcFyOa/lH3WlTYhSEUOZugHtIQM8aZfHErLeNYYH1500g7xbRl2tcAbeWRWmthh /uj+6UzB3f9s9JEGjp8B3Wr8U4HUFza4Vv0j3RmDRx5lAa2e0o9UPrzEZqMw07QGeG4KAIVq 9Hrl9lV9kuBl/sk50jMfrzTKiXmSZaKVeSCZ+Y/t6WK2nB/SiIOPqkTF/EzVkBdsHaynYp98 IlMm5WhQiMlIfiZ8Agde0Ew/yBWNKlC/vrMJmKy9JXKiUbHaHDrhf5pCSnaP6VBpb0xWj8Ir KdecWtWBvyAr7reLLaTR/d9gM8gIeHgPZgUvTdryjSx4fMOEMqaHPqRtYMEtNs2ru9DPv3we NNaUBhUYjLBXyNVZnpJLo1ryY9EgVGmI2EH9zp5v5Ef4mXPwiRw3aTjdt3PdbSiWcJSml3dq mPd9HniGTkbOcCRjz2f/RqRavTnlCf/XscZE6e1s6czxlaS3WcUThYRUDNXvMVVlGadUP1gL EYvuREs96QKqE2FR8j2exGn9SvsUgEnZ/JcFOgz6Qeow6XS4hqECmVsctKnQIF43CPRbWFxv mJlj+8FFhQ06+TMFiz1GqO86GLsZ3dEdAfucAdeFWM4D8/fTJbfZ/4lZv9nFKOz5jEeMW6tm 2nRxMTSakl6sCLm/6y/+VaCiDW2q92QF0g+5x7cWSSu6QYRiG+Zi26AtAezARVoddvxory9U J4swJT2AAcmVsvlqcB1aL9RdIxFHt7cWNEmvXZhHoM66xOm8GO5cIZb7VlWfRk0bJ5cKGeyO BCN4Gu9AaO/2lP3MsebhKrsVqwXIVTITrwJq9iNNIMVO8gtHON51Hg1OhP4M5/RfLgEyPFjZ sjznTeEBncBAqMv1yutW+oYytcWKtMWmwvuqWTA503/i9K2PSfNIZ9caQfmRr1pvcus/VSOm /4CZpTi40sECoXWPHKImbP/2HhXdxDX87is9ZwOHgNCSyI7cFwc5wj5mul5IdI1wfwNy48lP BiVAydl9bY2vlWfQS3iV5ypQOmHsUpXxZ7jARERAA==
IronPort-HdrOrdr: A9a23:fMAI7KzV1iBuQFq18TylKrPxruskLtp133Aq2lEZdPULSKKlfp GV88jziyWZtN9IYgBapTnyAtj7fZq8z+8/3WB1B9aftWbdyRKVxe1ZnOnfKl7bamfDH4xmpN 9dmsFFYbWaZzUb/KXHCWKDYrIdKay8gcaVbJDlvhBQpG9RGsRdxjY8LjzePlx9RQFAC5Z8Po Gb/NB7qz2pfmlSRtinB1EeNtKz6uHjpdbDW1orFhQn4A6BgXeD87jhCSWV2R8YTndm3aoiy2 7YiAb0j5/T/81TiyWsmFM73a4m2ecJ+eEzRPBkTfJlaQkEvzzYKriJnYfy/gzd7tvfrWrC2+ O83ivId/4Dl085OFvF5ScEH2LboXATA7iI8y7evZKrm72GeNpxYfAx+r5xY1/X7VEts8p717 8O12WFt4BPBReFhyjl4cPUPisa4HZcjEBS5dL7tUYvJrc2eftUt8gS7UlVGJAPEGbz750mCv BnCIXZ6OxNeV2XYnjFti03qebcFkgbD1ODWAwPq8aV2z9ZkDRwyFYZ3tUWmjMF+IgmQ5dJ6u zYOuBjla1ITMURcaVhbd1xCPefGyjIW1bBIWiSKVPoGOUOPG/MsYf+5PEv6OSjaPUzve4PcV T6ISFlXEIJCjLT4Je1rex2Gzj2MRaAYQg=
X-IronPort-Anti-Spam-Filtered: true
X-IronPort-AV: E=Sophos;i="5.92,218,1650931200"; d="scan'208,217";a="921773844"
Received: from alln-core-11.cisco.com ([173.36.13.133]) by alln-iport-6.cisco.com with ESMTP/TLS/DHE-RSA-SEED-SHA; 24 Jun 2022 05:51:55 +0000
Received: from mail.cisco.com (xfe-rcd-005.cisco.com [173.37.227.253]) by alln-core-11.cisco.com (8.15.2/8.15.2) with ESMTPS id 25O5pt1M006845 (version=TLSv1.2 cipher=AES256-SHA bits=256 verify=OK); Fri, 24 Jun 2022 05:51:55 GMT
Received: from xfe-rcd-005.cisco.com (173.37.227.253) by xfe-rcd-005.cisco.com (173.37.227.253) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.2.986.14; Fri, 24 Jun 2022 00:51:54 -0500
Received: from NAM10-BN7-obe.outbound.protection.outlook.com (72.163.14.9) by xfe-rcd-005.cisco.com (173.37.227.253) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.2.986.14 via Frontend Transport; Fri, 24 Jun 2022 00:51:54 -0500
ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=THEvD8pGqwdouA169jQ6A/POvlzKef8T6+8bfM+Qst3DAW+SlB+Rd3DlSvZwwHaKIPLwk+50SOLttZirjlvWGDQTyfBesGRagaQN+xEg99rrsAoQk07BRjArcPizfEdGTIf2cciGEsTT63SkC8A28tmaZ36q9J423PjwnZW/pwhKmSeFg78xcxuQ2OnFhSnt2J/Mod4Vs+y0HNLepCNI7WD7tWQ+uBb51dfVE6EUHPdNWMchjXGA8bH5pGc14U4x7LqUZ5XN75o0Jn+pZd1K3bZwlgbnxjUc8i2jVQmSpRJteb+0Ot2MuEnZXYB48atbswc7IzWj3C0au7x45bBxYA==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=KCb62lNw6ASlNUUjXgk1QAummauspMKKqEZF9TO4kPQ=; b=Ipo6fHeBafqf4RjdIsR8DooPXY/0eihYeaf2E/WPRk37E59lCMhZQBxmAk0XTdwMXhix4rAXkuvQTWOuz4PQB+roboGn22Vx9icYt8Yf54XeT9m678XW2UBzfb+69X387J0os1pSvoQLzpmB4AXAPsDTCEQbD/1inJIZaiBEsQH/3Ge8WPWl0mcLg33XLuQadwthmuLaSBlbvo+foWeW/Q2tKBdNaE5Iu18/HguLACHiaYEvGfoVnDXqIlpdX7IVhlrnvu4Mi9gmNnJDr1NGDFz3mspVrER9WVDvqMu1PEdGjSWA235Gqo8SlS0+wjTUITzchI+33D6XQ4ARByKK8g==
ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=cisco.com; dmarc=pass action=none header.from=cisco.com; dkim=pass header.d=cisco.com; arc=none
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=cisco.onmicrosoft.com; s=selector2-cisco-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=KCb62lNw6ASlNUUjXgk1QAummauspMKKqEZF9TO4kPQ=; b=xzIFzXZhiDPDyJj1DEPtX+C+344/OmDkJ8Uw6oIt+DuRH1eN7j4zXnFHISCmsn4bO+3on3yntFlvZCxu3KeI3xj6y32XOt0FjLTtt7l5QPKHZOAWlvDyJo9NM6aphuUcxJO0v9xdLslFJrSJ7SEmgySxZJZQQGjFt6irji7mp+Y=
Received: from PH0PR11MB4966.namprd11.prod.outlook.com (2603:10b6:510:42::21) by DM6PR11MB2843.namprd11.prod.outlook.com (2603:10b6:5:c7::33) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.5353.17; Fri, 24 Jun 2022 05:51:48 +0000
Received: from PH0PR11MB4966.namprd11.prod.outlook.com ([fe80::3891:c0c9:3d21:bfe7]) by PH0PR11MB4966.namprd11.prod.outlook.com ([fe80::3891:c0c9:3d21:bfe7%6]) with mapi id 15.20.5373.016; Fri, 24 Jun 2022 05:51:48 +0000
From: "Eric Vyncke (evyncke)" <evyncke@cisco.com>
To: "tools-discuss@ietf.org" <tools-discuss@ietf.org>, "ietf@ietf.org" <ietf@ietf.org>
Subject: Phasing out TLS 1.0/1.1 on IETF services
Thread-Topic: Phasing out TLS 1.0/1.1 on IETF services
Thread-Index: AQHYh45+HYxpBNqPIkKZfpMLfqRlJg==
Date: Fri, 24 Jun 2022 05:51:48 +0000
Message-ID: <492E44F3-68AB-4252-925E-53A48D5D16FA@cisco.com>
Accept-Language: fr-BE, en-US
Content-Language: en-GB
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
user-agent: Microsoft-MacOutlook/16.62.22061100
authentication-results: dkim=none (message not signed) header.d=none;dmarc=none action=none header.from=cisco.com;
x-ms-publictraffictype: Email
x-ms-office365-filtering-correlation-id: af50a54f-0d99-4196-c9d1-08da55a5a129
x-ms-traffictypediagnostic: DM6PR11MB2843:EE_
x-ms-exchange-senderadcheck: 1
x-ms-exchange-antispam-relay: 0
x-microsoft-antispam: BCL:0;
x-microsoft-antispam-message-info: KlAT8EYBrSVsGaBRQp3zmbGpa2HLjqrkVOHJDTg+UxeUaU/zJYxsbSQcXushUaWR2z4OU7qK+zgj+YeiY66RWt0UAB0uxqcn7bS/eFGBR5rEVOLWYk1VzsPgUHuYGWvnCTpQXO6bs2RDsb0T/Lo/fciEhu+FxhJaizuRIobbngYvHspk2zMN5xaNibxaYUXOQ4t9+n4UD4hRop9BoM8+MZXIOsTaVWSfTasJ6Hxe1gH+LUDIbNGuZtLANteJPg2TUqK+h7lrWG9kAhg/jT/k2k4Z2lljWrl2gG/MtVdADbJZz0ZRljLxnQDq1shaGX3qNWGoVafXhzrk75NCY33WX0mbqMcDZcgqhoJSh7y3GveWDA9Jpq+P+ot52fz56p0l22lZheTNRNiM8rvAUD+hyCUXLTYePZrTeigoHg1Iiy+lBcvQ4o4uhCLK6Mxv9leLOAk2wQckWjLXEmYOrM49DLjr0sNwq36uBNizfbrWUzmGrRr3yOecXsv1yq9Srn/TuSWlhRrJzyeyaqFn81UTZu/GbDjzpMWb30g4b2IS6hNYt6p+Ge1P26EIyrLK5C+DD/21+NuUl19RQGhfnrueXDOuNFb6tq36OetQf4a0juZn/emcaCJA45vM5So+im7yaMTRjvcxskBMf2613LVRVl3Ijpei6iJvwgwgcBVCq1wlU4NkvkMML4X5vlEncFr603YlKoY5KdK4GCZsZs9X5n9quOAR3Mf21C/QG1LvVhEU2m4xiW0zeyPFLEKAKcEB7/ErFJdONcOGYhpOCZn+HeNvC+w1pP/Z9qFW6XlhekKBsvs0e7ntqZEuwOOU3t9gCfbVQMXSVCYlFl45euBJLpeYcdZihD7e6JVOQqyt+Tk=
x-forefront-antispam-report: CIP:255.255.255.255; CTRY:; LANG:en; SCL:1; SRV:; IPV:NLI; SFV:NSPM; H:PH0PR11MB4966.namprd11.prod.outlook.com; PTR:; CAT:NONE; SFS:(13230016)(4636009)(136003)(396003)(346002)(366004)(376002)(39860400002)(41300700001)(8676002)(76116006)(2616005)(66946007)(83380400001)(6512007)(71200400001)(450100002)(110136005)(66446008)(38070700005)(316002)(66476007)(64756008)(66556008)(6486002)(966005)(122000001)(478600001)(91956017)(36756003)(6506007)(166002)(38100700002)(2906002)(33656002)(4744005)(186003)(86362001)(5660300002)(8936002)(45980500001); DIR:OUT; SFP:1101;
x-ms-exchange-antispam-messagedata-chunkcount: 1
x-ms-exchange-antispam-messagedata-0: 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
Content-Type: multipart/alternative; boundary="_000_492E44F368AB4252925E53A48D5D16FAciscocom_"
MIME-Version: 1.0
X-MS-Exchange-CrossTenant-AuthAs: Internal
X-MS-Exchange-CrossTenant-AuthSource: PH0PR11MB4966.namprd11.prod.outlook.com
X-MS-Exchange-CrossTenant-Network-Message-Id: af50a54f-0d99-4196-c9d1-08da55a5a129
X-MS-Exchange-CrossTenant-originalarrivaltime: 24 Jun 2022 05:51:48.7869 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: 5ae1af62-9505-4097-a69a-c1553ef7840e
X-MS-Exchange-CrossTenant-mailboxtype: HOSTED
X-MS-Exchange-CrossTenant-userprincipalname: e7FSmfbqG1sFz913q0wOJvVyUU1x4ArWg2QrI0MtQBdkookpeaYRxy8FHEqiypzOw1oqDkOaRCu9RczSTSinIg==
X-MS-Exchange-Transport-CrossTenantHeadersStamped: DM6PR11MB2843
X-OriginatorOrg: cisco.com
X-Outbound-SMTP-Client: 173.37.227.253, xfe-rcd-005.cisco.com
X-Outbound-Node: alln-core-11.cisco.com
Archived-At: <https://mailarchive.ietf.org/arch/msg/ietf/RCNGh4m6KP5BTb163q38E8JVSG4>
X-BeenThere: ietf@ietf.org
X-Mailman-Version: 2.1.39
Precedence: list
List-Id: IETF-Discussion <ietf.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/ietf>, <mailto:ietf-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/ietf/>
List-Post: <mailto:ietf@ietf.org>
List-Help: <mailto:ietf-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/ietf>, <mailto:ietf-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 24 Jun 2022 05:52:01 -0000
Dear all, (please reply to tools-discuss@ietf.org<mailto:tools-discuss@ietf.org> only) Based on feedback from our penetration testing contractor, and taking RFC8996 [1] into consideration, the IETF will begin phasing out TLS 1.0 and 1.1 on IETF services in the coming days, We will begin [2] with requiring TLS 1.2 and above at Cloudflare and monitor for issues [3]. We will then proceed making similar changes to other services. Regards, -éric (liaison to the tools team for the IESG) [1] https://datatracker.ietf.org/doc/html/rfc8996 Deprecating TLS 1.0 and TLS 1.1 [2] we will announce the change 24 hour in advance [3] monitoring potential drops in connection statistics as well as opened cases
- Phasing out TLS 1.0/1.1 on IETF services Eric Vyncke (evyncke)
- Re: [Tools-discuss] Phasing out TLS 1.0/1.1 on IE… Robert Sparks