[TLS] Re: 3GPP requires TLS 1.2 support to be disabled by default
Eric Rescorla <ekr.ietf@gmail.com> Wed, 02 September 2026 16:05 UTC
Return-Path: <ekr.ietf@gmail.com>
X-Original-To: tls@mail2.ietf.org
Delivered-To: tls@mail2.ietf.org
Received: from localhost (localhost [127.0.0.1]) by mail2.ietf.org (Postfix) with ESMTP id 0929A133F7E91 for <tls@mail2.ietf.org>; Wed, 2 Sep 2026 09:05:35 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=ietf.org; s=ietf1; t=1788365135; bh=xjqEcSzzse1c2quYZzadnhLaJYWOG/08Pad9Gz5nodI=; h=References:In-Reply-To:From:Date:Subject:To:Cc; b=RL1HpD3oZVDLfkeTLwbVhGn4VIK+a3ToD2w0oAl85jJM3XlrwDgMyQ/rgc3K0sUsx rKVEnLeYwTGQzzWzafoUDEDc3No01+K2p/hZJ2OyAfuFFVv4tdCzRY44P7ihqQC2SY taMkY58H2qZbbl9lufjtNNHv2eTXXC/WW+T8TqJ0=
X-Virus-Scanned: amavisd-new at ietf.org
X-Spam-Flag: NO
X-Spam-Score: -2.098
X-Spam-Level:
X-Spam-Status: No, score=-2.098 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=unavailable autolearn_force=no
Authentication-Results: mail2.ietf.org (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com
Received: from mail2.ietf.org ([166.84.6.31]) by localhost (mail2.ietf.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id P-_3_THBHuEq for <tls@mail2.ietf.org>; Wed, 2 Sep 2026 09:05:34 -0700 (PDT)
Received: from mail-yx2-x07.google.com (mail-yx2-x07.google.com [IPv6:2607:f8b0:4864:41::7]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) key-exchange X25519 server-signature ECDSA (P-256) server-digest SHA256) (No client certificate requested) by mail2.ietf.org (Postfix) with ESMTPS id 801FA133F65C8 for <tls@ietf.org>; Wed, 2 Sep 2026 08:56:26 -0700 (PDT)
Received: by mail-yx2-x07.google.com with SMTP id 00721157ae682-8552adbe8ebso3530817b3.1 for <tls@ietf.org>; Wed, 02 Sep 2026 08:56:26 -0700 (PDT)
ARC-Seal: i=1; a=rsa-sha256; t=1788364580; cv=none; d=google.com; s=arc-20260327; b=iLZ/x0F35v9W109ySWjN4oktzim+Rnwr0XTrHykkDBOFZzOib9Ka2xBBOvsd1Ni83H vhHh5P+OdidjN8YRvzTtdOPzun56G4MVdTuIOeMKOaBnnn94qV5Ej5b1nUEZs7WDi24x mlr/kbs1Jhh4C8LrC8+xMp1Fp58DnaFPvbz3uJqxRBvyLLOrsdC0cAtCbSnQpwRjDUbc fCkvAkkFNEUM7I1pdwpmXiK5jw9o0Uz2u9kK4Pd6/pnwM3wSM2kU3cbTPHyuw37J3rnQ pbm6CpUlsa4wsRBcNIwtE0+e1ZmL+vN9ofsMYLxJDrZ+xjJa33Sc/fFLeOFoI8diXxW8 yVmA==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20260327; h=cc:to:subject:message-id:date:from:in-reply-to:references :mime-version:dkim-signature; bh=1U2T7T6jygU2Jl4SYpL/iGlQdULFel3Rs6PlVrM00Rg=; fh=tB3xfB13JE6J6FsC+xzg6Mz5lq+7E9z+fsUw3VqaYOk=; b=rinOReyG++sb+eetELqr0W+Yf1BE8NeIEZSgtSAV4e6+NLGsNy+8ZRRMiSwCYZ3ROi cuadc7ri/zycZ+qPvBMHTpyTZSuTWr2KgNxhkuJpu8fi+2pHk480BJln4cg7vo2mdEuU FwZRo1xQ/dnqQjPNcpDQ6W69nZIKZfvRas2itTj7hbDkpVcpvZZup9Z+jXiGRyF+Y1gc 4c6q1Z763xg/XXoq1SQD99IW4Dnunn0DZbj3uDgvY826ls0tJbsxLF10g9S9DcpNCvuC QdoPWUGaI25kqhLiP22qqu2lPd8XhmWki2w4uWpRmt0aahVU4pfJ4GagOi2rdTIngxE2 I7Pg==; darn=ietf.org
ARC-Authentication-Results: i=1; mx.google.com; arc=none
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20251104; t=1788364580; x=1788969380; darn=ietf.org; h=content-type:cc:to:subject:message-id:date:from:in-reply-to :references:mime-version:from:to:cc:subject:date:message-id:reply-to :content-type; bh=1U2T7T6jygU2Jl4SYpL/iGlQdULFel3Rs6PlVrM00Rg=; b=WmlLWrHOuT1us7/+DsPTdipYm+VSc6ZnYk0yI+LEW2ruKegsAgl4hcuSMtandJJcPV vhYWLurHASZ+UVR79KK/Zj/z0C6cHByw1bFHdpH+zsl8wE3aQ0Qofv2r1XHLc8vfozwx C/Rl5fxD2gwC0eUzET7SPFPg1nAaIFXMkwmZsDKeUqyTC/l20fqNvlgvHbS1gz+i9OkU VUxbmSWADw5lIH5vezaYDloDmZvSCV7OIqmGtz7il6bGj7t2AATlr7PQvaGLFFDjdExY 4gbVqCTgGJbhcrLr7lYVt1jpU8MN/uDH8l4bTGcZzodvn8Vdui1tkDEUzrcxJtdUf9s/ lfXA==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20251104; t=1788364580; x=1788969380; h=content-type:cc:to:subject:message-id:date:from:in-reply-to :references:mime-version:x-gm-gg:x-gm-message-state:from:to:cc :subject:date:message-id:reply-to:content-type; bh=1U2T7T6jygU2Jl4SYpL/iGlQdULFel3Rs6PlVrM00Rg=; b=rqgzS2he4sV7LcZatrOUaiqaIQAeQq7cyL3j0yq+gT40nJWjFkzaeW0ySC7zTuHKNP rtWmmjjnaqXp675Sh98tv1AshtWBzA60ysbtQWkjL+cWtxSC/1U0XwVS85h11TRuoi5y 93oCXkmdTCdwJP+Y4SCTa4C8LVrleT7zFVRRoXMUX7+ybLfSHMugsnXa4r5laeU2uqDz a5RDSOmUjmmM7O34i8EvUhLE/BV2/pC8CCdIGHDJkEK5XM8Urqxrm3Jo8T0FS7IDa6/I XFNLCfB0oj12633xKbPaCSZIOlTPQ5XSnjgtC3P61Z104J5qUh5u4DiU9CRxYAovM9T9 kBIw==
X-Forwarded-Encrypted: i=1; AKwUvBxsrjD/vTjn7sPQEPqokjxp5i6dgys6QMlj629xpd4ORnoqkTWMzDTheDTxt8Yu5xwTMlg=@ietf.org
X-Gm-Message-State: AFuF++mxriMM9FMJZwEEzg+WRlYDTiZe5wFtcGH1sz7hqx9eWzBM/9k8 RyUZ8t7WOH8RV7J3F4YX2x0lUlcbVjW6IG2pm2eu1gzh/DfkaRzmDm+z2w9TOtQaB5ANCesQm22 c5p3zNI6HECQP5aZMZXNoqOJSb2UsTFrnYd0vYB/n7Q==
X-Gm-Gg: AYBFou1465P34rHOLyn3w1zTA3fkTZo9obhCkVAqRkbgHnco88yo6WB03V+391x9Lda ECZggqlu4867B+udiWdtQQ6aI/BmDiRDqrntiugrZ2sBBCWbWF+zU7YYQtWVgrilSOGwRBD0Meo rrmUFlgDlVkL1VH+aFI/eBGgprziWTnT150DosQVHzFGjiZwUw1y73rLA+um/9eNetnivaSiyRc Qgnr9VfJJVQrNYEeYl9u5WS+BFQp+ZNdA2rZZyF3DgL2K8GW3EnQoUYKvcZROgD2rEP/I4/1FZD BlYxefIwoTmN518iGEWn+pAgAl+Eti/tgxccebGKLH8Xh5Nxy2rUT4c7Wbfqajl7l1ooJqBJwmt gbY6PaxmOnxRckTfNJox7lCy4bKt4Z5w=
X-Received: by 2002:a05:690c:389:b0:80f:d844:779c with SMTP id 00721157ae682-86c526f8391mr29943657b3.22.1788364579660; Wed, 02 Sep 2026 08:56:19 -0700 (PDT)
MIME-Version: 1.0
References: <AS4PR07MB8825400913D55FC72959167389A82@AS4PR07MB8825.eurprd07.prod.outlook.com> <accc56e6-8f47-4ab1-921f-ae6682b275e2@app.fastmail.com>
In-Reply-To: <accc56e6-8f47-4ab1-921f-ae6682b275e2@app.fastmail.com>
From: Eric Rescorla <ekr.ietf@gmail.com>
Date: Wed, 02 Sep 2026 08:56:08 -0700
X-Gm-Features: AcwNN1UaXpjv-pyhQDssxggjAqRp5wGCqdYBFBjPl2Ebe5X1zL38S_6g4KTTKxY
Message-ID: <CALtcm6RfpHrat=qNWiY0+Epj6o06utVLnQsULKMPXKbKPdnS1Q@mail.gmail.com>
To: Martin Thomson <mt@lowentropy.net>
Content-Type: multipart/alternative; boundary="0000000000007fe835065a821317"
Message-ID-Hash: 323SUUOW6D6TKLRXVORUNLX47O5XXLPD
X-Message-ID-Hash: 323SUUOW6D6TKLRXVORUNLX47O5XXLPD
X-MailFrom: ekr.ietf@gmail.com
X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; emergency; loop; banned-address; member-moderation; header-match-tls.ietf.org-0; header-match-tls.ietf.org-1; header-match-tls.ietf.org-2; header-match-tls.ietf.org-3; header-match-tls.ietf.org-4; nonmember-moderation; administrivia; implicit-dest; max-recipients; max-size; news-moderation; no-subject; digests; suspicious-header
CC: John Mattsson <john.mattsson=40ericsson.com@dmarc.ietf.org>, "<tls@ietf.org>" <tls@ietf.org>
X-Mailman-Version: 3.3.9rc6
Precedence: list
Subject: [TLS] Re: 3GPP requires TLS 1.2 support to be disabled by default
List-Id: "This is the mailing list for the Transport Layer Security working group of the IETF." <tls.ietf.org>
Archived-At: <https://mailarchive.ietf.org/arch/msg/tls/JjCV4YovbsaQQ8uKtOtoMlQusIk>
List-Archive: <https://mailarchive.ietf.org/arch/browse/tls>
List-Help: <mailto:tls-request@ietf.org?subject=help>
List-Owner: <mailto:tls-owner@ietf.org>
List-Post: <mailto:tls@ietf.org>
List-Subscribe: <mailto:tls-join@ietf.org>
List-Unsubscribe: <mailto:tls-leave@ietf.org>
+1 -Ekr On Tue, Sep 1, 2026 at 3:31 AM Martin Thomson <mt@lowentropy.net> wrote: > Thanks for the good work you did here John. This is a good outcome. > Hopefully we can iron out the DTLS 1.3 bumps in a reasonable timeframe so > that this is not just the stream variant. > > On Tue, Sep 1, 2026, at 09:55, John Mattsson wrote: > > Hi, > > 3GPP has just decided that TLS 1.2 support shall be disabled by > > default. Hopefully, that will help phase out the remaining TLS 1.2-only > > nodes. TLS 1.3 has been mandatory since 2018. With the urgent migration > > to PQC, (D)TLS 1.2 is not really an option anymore. And while TLS 1.2 > > can be hardened, most TLS 1.2-only nodes are not. > > > > https://www.3gpp.org/ftp/Meetings_3GPP_SYNC/SA3/docs/S3-263562.zip > > > > Cheers, > > John Preuß Mattsson > > > > > > _______________________________________________ > > TLS mailing list -- tls@ietf.org > > To unsubscribe send an email to tls-leave@ietf.org > > _______________________________________________ > TLS mailing list -- tls@ietf.org > To unsubscribe send an email to tls-leave@ietf.org >
- [TLS] 3GPP requires TLS 1.2 support to be disable… John Mattsson
- [TLS] Re: 3GPP requires TLS 1.2 support to be dis… Martin Thomson
- [TLS] Re: 3GPP requires TLS 1.2 support to be dis… Eric Rescorla