[TLS] 3GPP requires TLS 1.2 support to be disabled by default
John Mattsson <john.mattsson@ericsson.com> Tue, 01 September 2026 07:55 UTC
Return-Path: <john.mattsson@ericsson.com>
X-Original-To: tls@mail2.ietf.org
Delivered-To: tls@mail2.ietf.org
Received: from localhost (localhost [127.0.0.1]) by mail2.ietf.org (Postfix) with ESMTP id C060E132E0CA0 for <tls@mail2.ietf.org>; Tue, 1 Sep 2026 00:55:39 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=ietf.org; s=ietf1; t=1788249339; bh=sAc2FoKk/x056P2QqE4mIOrCjymJonwqgA8fHn67ZQg=; h=From:To:Subject:Date; b=IAXPqaMSJIhthButa/GqmPxzc3dZcvN5v6OTXSrrb0F9TcJ2EPpiXJ9r1juHRAWDG dg8O7HaPbRxNESBZHrogovEbJgsU5Rw2TXci03IhVAsLjvNm5PUhVrgQ5bDNESy+It ecsNJqeoBvCM93EaJ6/67pndDqNFlm4Fyvam4AiE=
X-Virus-Scanned: amavisd-new at ietf.org
X-Spam-Flag: NO
X-Spam-Score: -2.096
X-Spam-Level:
X-Spam-Status: No, score=-2.096 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H2=0.001, RCVD_IN_VALIDITY_RPBL_BLOCKED=0.001, RCVD_IN_VALIDITY_SAFE_BLOCKED=0.001, SPF_NONE=0.001] autolearn=ham autolearn_force=no
Authentication-Results: mail2.ietf.org (amavisd-new); dkim=pass (2048-bit key) header.d=ericsson.com
Received: from mail2.ietf.org ([166.84.6.31]) by localhost (mail2.ietf.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id wwkKo7l3L3o3 for <tls@mail2.ietf.org>; Tue, 1 Sep 2026 00:55:39 -0700 (PDT)
Received: from DU2PR03CU002.outbound.protection.outlook.com (mail-northeuropeazon11011047.outbound.protection.outlook.com [52.101.65.47]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange ECDHE (P-384) server-signature ECDSA (P-256) server-digest SHA256) (No client certificate requested) by mail2.ietf.org (Postfix) with ESMTPS id 1D39F132E0C99 for <tls@ietf.org>; Tue, 1 Sep 2026 00:55:38 -0700 (PDT)
ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none; b=Qq/waovfBRxKyGPnKrKwGyE47Wd+TZUMzcdfY64QH8sm7TFKjZuvnuH5eNaxS8+YXg/H3N59XaPg8yM3r3QO3zjZ5fPHg8EzG4gH/l1ORMjqEu13RqncRdFizxje3bXnUua3XlrqjmyTkNuZ6zVFrfMw8Ol6LRA51iKE6JnZ9Z16vGWER7A9XYl/GUQI19weF3NgHQh3PxOrt7OMbTuPSvDChSpdtT3MtMBGYWF9W2ZR9Q399hzh132SPvYqMHZxcvLOHrn3BdV7egaggze2/8grg7ozEnUrgJw4mhrjAw3y0aLIgl6Km9JaCLIW+32ZtZSqBejzLtSbeNvtTeSKTg==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector10001; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=sAc2FoKk/x056P2QqE4mIOrCjymJonwqgA8fHn67ZQg=; b=HEAM8XtaQ1zeZyCiy0d9uBBdcxOdhauK1U+dBgzn9gSJcyUdJeaUg+HJiSKzeLuDYIMMb/pnSHtwTuLFsvHj0zm7Z0BfGLmC2MDO+e8KryopM7ZBeyH4bn3H0Y20CUdipDIxNkqfhTqIBAwU7LGMd8O3AZ7u8Igie1aeiAmjfKl4LKrX6PVFULi2SUjblcc0fhvM2JPFM3Hc7mFlCqtwugmvb4b8n/EcDSJ4Y+0ug2aLmTlcLukaH15cH3QmFAfHkuIpZCi2bpt3SOSM4IqRVAiWhArWR4xkz3F1ljqvrn4fPVQUcugncXOfz0mMvBsJ8xopVt0AgP1KEMBzfNdhjg==
ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=ericsson.com; dmarc=pass action=none header.from=ericsson.com; dkim=pass header.d=ericsson.com; arc=none
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=ericsson.com; s=selector2; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=sAc2FoKk/x056P2QqE4mIOrCjymJonwqgA8fHn67ZQg=; b=a3+nziYeoFFEJpb5K2hFG/IGJUuES7b4p9RM49F6Dw3r8Y7O7wgms+Y1r3kp5vGsRA0dbL95vOzAjiqr1Gm5JRjWkBrF0Yj4eJDDN6nPmEftdRn8P468LBK69HmZMsAewRKlej+BsFZYpPwEz6IH5EAP1IDUNxvt7f0yCkh+DjcCIz3PYXLKiMNlytz6BJ0dJDot7L0I4zAqsEQxQIXqTRyNHH6y4uqkt9iFHCRN/tHsbAMjDZH4JdZMTg7mzsGAPqE5RgYbYaZZmnPPmWZ5yuH1oTi3pAP9+oT/+eJ/6Hi27UgzLTJ0g1zj29VgDPlM92kIgvxJ10hRdy/gOE3Qjg==
Received: from AS4PR07MB8825.eurprd07.prod.outlook.com (2603:10a6:20b:4f3::15) by DU2PR07MB9521.eurprd07.prod.outlook.com (2603:10a6:10:49f::9) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.360.8; Tue, 1 Sep 2026 07:55:31 +0000
Received: from AS4PR07MB8825.eurprd07.prod.outlook.com ([fe80::11a4:5f37:fa92:f174]) by AS4PR07MB8825.eurprd07.prod.outlook.com ([fe80::11a4:5f37:fa92:f174%5]) with mapi id 15.21.0360.003; Tue, 1 Sep 2026 07:55:31 +0000
From: John Mattsson <john.mattsson@ericsson.com>
To: "<tls@ietf.org>" <tls@ietf.org>
Thread-Topic: 3GPP requires TLS 1.2 support to be disabled by default
Thread-Index: AQHdOeA0tosc9nQP20iLGyzTRzDv4g==
Date: Tue, 01 Sep 2026 07:55:31 +0000
Message-ID: <AS4PR07MB8825400913D55FC72959167389A82@AS4PR07MB8825.eurprd07.prod.outlook.com>
Accept-Language: en-US
Content-Language: en-GB
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
x-ms-reactions: allow
authentication-results: dkim=none (message not signed) header.d=none;dmarc=none action=none header.from=ericsson.com;
x-ms-publictraffictype: Email
x-ms-traffictypediagnostic: AS4PR07MB8825:EE_|DU2PR07MB9521:EE_
x-ms-office365-filtering-correlation-id: 941fd405-baf0-465f-3800-08df07fe6550
x-ms-exchange-senderadcheck: 1
x-ms-exchange-antispam-relay: 0
x-microsoft-antispam: BCL:0;ARA:13230040|376014|366016|1800799024|23010399003|38070700021|11063799006|10067099003|56012099006|18002099003|8096899003|13003099007;
x-microsoft-antispam-message-info: XlmWP/97J4p6fEIwwr5x1bje2itYM4tnzdvHz6+JRbdTlnej83LvmtBnmzIV+R6tFi3WRc0cv+mamG9NQr0pYm/qu0zMqnXiPRujSbzkt3+W+BUYOHOw5iPzWBDFxaTqHjIzn6q7xRcohP80gE9L4JddTNFhmjJiowURU4bZK0LM0FyMREMQXQjXlqJxemlqr2H+JV/qSeO5ewReavtI0K+owaC5ZpXtV2BgWbWdwfe+8oytg9Bnj/6qD1M2p6CzU7DoucLWeYVGshttOCAZx6imW/sKUgI9r34Jz9bSESIJrPWGf66Mh3t1cPUa1JRVojMM3OqWPaCA/vhZP7zNshZp91xAkYGl8BKBvl+AZ9EYsADotrgOo7KWTjUsePu6ziMaDyHcwwKgoTwF+uTibJOr9FDPlY+Bor0qQtMEgHmx5QuZcm+kiqMGwWyX7rXg37Cdu5SAw44U6h5IKm5F5b4bQNfLXzVNA7WXGYl0Ws/OogaDJO/7WoDQVfSeLsLkTBMGa6hJv5LlO04LaHKGrMo/OLjFk5OQkycygoLIYbPk6A6DRF9mCOWiHSNU2bcPUbe5S2qIJHdtMQwBqOAfWVbY1tLz50YSw3Vss9jf2nfIsp0DUPTnjlill2zPDyvdhZaTV9moFOVUydZHGY2ojU2jtzrdQof+BTldqx29mTI=
x-forefront-antispam-report: CIP:255.255.255.255;CTRY:;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:AS4PR07MB8825.eurprd07.prod.outlook.com;PTR:;CAT:NONE;SFS:(13230040)(376014)(366016)(1800799024)(23010399003)(38070700021)(11063799006)(10067099003)(56012099006)(18002099003)(8096899003)(13003099007);DIR:OUT;SFP:1101;
x-ms-exchange-antispam-messagedata-chunkcount: 1
x-ms-exchange-antispam-messagedata-0: 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
Content-Type: multipart/alternative; boundary="_000_AS4PR07MB8825400913D55FC72959167389A82AS4PR07MB8825eurp_"
MIME-Version: 1.0
X-OriginatorOrg: ericsson.com
X-MS-Exchange-CrossTenant-AuthAs: Internal
X-MS-Exchange-CrossTenant-AuthSource: AS4PR07MB8825.eurprd07.prod.outlook.com
X-MS-Exchange-CrossTenant-Network-Message-Id: 941fd405-baf0-465f-3800-08df07fe6550
X-MS-Exchange-CrossTenant-originalarrivaltime: 01 Sep 2026 07:55:31.2128 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: 92e84ceb-fbfd-47ab-be52-080c6b87953f
X-MS-Exchange-CrossTenant-mailboxtype: HOSTED
X-MS-Exchange-CrossTenant-userprincipalname: 2alFFaMxWqmC4VJMiNdX2yRACZlHDneeTYuo1tunCFa/gdIkDI8YypFTvATkdhnNtS5CAQ8A4BQN5X/ZtVMbzOzlvV1tR7u+F7e5Qtg9lFo=
X-MS-Exchange-Transport-CrossTenantHeadersStamped: DU2PR07MB9521
Message-ID-Hash: WGAJUUBB3U2Z6QK4VPYXXED4ROCHQJ4A
X-Message-ID-Hash: WGAJUUBB3U2Z6QK4VPYXXED4ROCHQJ4A
X-MailFrom: john.mattsson@ericsson.com
X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; emergency; loop; banned-address; member-moderation; header-match-tls.ietf.org-0; header-match-tls.ietf.org-1; header-match-tls.ietf.org-2; header-match-tls.ietf.org-3; header-match-tls.ietf.org-4; nonmember-moderation; administrivia; implicit-dest; max-recipients; max-size; news-moderation; no-subject; digests; suspicious-header
X-Mailman-Version: 3.3.9rc6
Precedence: list
Subject: [TLS] 3GPP requires TLS 1.2 support to be disabled by default
List-Id: "This is the mailing list for the Transport Layer Security working group of the IETF." <tls.ietf.org>
Archived-At: <https://mailarchive.ietf.org/arch/msg/tls/JhZtty2eWywl4LHjdFZ3i9YAycY>
List-Archive: <https://mailarchive.ietf.org/arch/browse/tls>
List-Help: <mailto:tls-request@ietf.org?subject=help>
List-Owner: <mailto:tls-owner@ietf.org>
List-Post: <mailto:tls@ietf.org>
List-Subscribe: <mailto:tls-join@ietf.org>
List-Unsubscribe: <mailto:tls-leave@ietf.org>
Hi, 3GPP has just decided that TLS 1.2 support shall be disabled by default. Hopefully, that will help phase out the remaining TLS 1.2-only nodes. TLS 1.3 has been mandatory since 2018. With the urgent migration to PQC, (D)TLS 1.2 is not really an option anymore. And while TLS 1.2 can be hardened, most TLS 1.2-only nodes are not. https://www.3gpp.org/ftp/Meetings_3GPP_SYNC/SA3/docs/S3-263562.zip Cheers, John Preuß Mattsson
- [TLS] 3GPP requires TLS 1.2 support to be disable… John Mattsson
- [TLS] Re: 3GPP requires TLS 1.2 support to be dis… Martin Thomson
- [TLS] Re: 3GPP requires TLS 1.2 support to be dis… Eric Rescorla