Re: [TLS] prohibit <1.2 support on 1.3+ servers (but allow clients)

[Florian Weimer <[e-mail]>]

On 05/21/2015 06:10 PM, Dave Garrett wrote:

> 2) For TLS 1.3, add a blurb to the effect of:
> "Server TLS implementations supporting TLS 1.3 or later MUST NOT negotiate TLS 1.0 or TLS 1.1 for any reason.
> Client TLS implementations are RECOMMENDED to not support old TLS versions, where possible."

How is this different from TLS 1.1 and 1.2?  Both RFCs obsoleted its
successor, so from an IETF perspective, there is just a single version
right now, TLS 1.2, and everything else is non-conforming.

-- 
Florian Weimer / Red Hat Product Security