[TLS] Re: 3GPP requires TLS 1.2 support to be disabled by default
Martin Thomson <mt@lowentropy.net> Tue, 01 September 2026 10:31 UTC
Return-Path: <mt@lowentropy.net>
X-Original-To: tls@mail2.ietf.org
Delivered-To: tls@mail2.ietf.org
Received: from localhost (localhost [127.0.0.1]) by mail2.ietf.org (Postfix) with ESMTP id 5388C132F781D for <tls@mail2.ietf.org>; Tue, 1 Sep 2026 03:31:11 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=ietf.org; s=ietf1; t=1788258671; bh=7HVqyETd0Lo4T/jQT8Dzu75ecl03SFpsdMN/EBVkeXg=; h=Date:From:To:In-Reply-To:References:Subject; b=nPLKa+QOSxS7HcwgpRSYh2xbkebwvUZ6fqEUTYKrWeehf7S8lFVxhV2zgaOMgEpyO FEuK/0NQFSqp8NcVdVKU4uTCnr7E9x6QLomO3VjONdjFRLxBz4HXo9aDKafCJJTi3N P0XdpQ8iOMVXKP1CodgA9jbwubjMMtwjvMrTzKDA=
X-Virus-Scanned: amavisd-new at ietf.org
X-Spam-Flag: NO
X-Spam-Score: -2.799
X-Spam-Level:
X-Spam-Status: No, score=-2.799 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, RCVD_IN_DNSWL_LOW=-0.7, RCVD_IN_VALIDITY_RPBL_BLOCKED=0.001, RCVD_IN_VALIDITY_SAFE_BLOCKED=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: mail2.ietf.org (amavisd-new); dkim=pass (2048-bit key) header.d=lowentropy.net header.b="Dw0BOkCO"; dkim=pass (2048-bit key) header.d=messagingengine.com header.b="Mn+14S+R"
Received: from mail2.ietf.org ([166.84.6.31]) by localhost (mail2.ietf.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id r6S-6ffG80Ev for <tls@mail2.ietf.org>; Tue, 1 Sep 2026 03:31:10 -0700 (PDT)
Received: from fhigh-a2-smtp.messagingengine.com (fhigh-a2-smtp.messagingengine.com [103.168.172.153]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature ECDSA (P-256) server-digest SHA256) (No client certificate requested) by mail2.ietf.org (Postfix) with ESMTPS id BA98E132F7812 for <tls@ietf.org>; Tue, 1 Sep 2026 03:31:10 -0700 (PDT)
Received: from phl-compute-04.internal (phl-compute-04.internal [10.202.2.44]) by mailfhigh.phl.internal (Postfix) with ESMTP id 7B39F14000A9; Tue, 1 Sep 2026 06:31:04 -0400 (EDT)
Received: from phl-imap-15 ([10.202.2.104]) by phl-compute-04.internal (MEProxy); Tue, 01 Sep 2026 06:31:04 -0400
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=lowentropy.net; h=cc:content-transfer-encoding:content-type:content-type:date :date:from:from:in-reply-to:in-reply-to:message-id:mime-version :references:reply-to:subject:subject:to:to; s=fm1; t=1788258664; x=1788345064; bh=q6C+UT/37E4to45zbD2wf24bMD+Slm//a7dgoAIh3fw=; b= Dw0BOkCOxojSlHKlDtAxxHECph2GRH66+O8qslz8no3yohcXAEzvlF9kEiW46t/Y tlqLKbrWw/O3NHv1aG0pH5eZoat+0iH9ulX0mVnFG/vQW7CIX6F9SvLDira/0GVk 3IlwbcNueaxhAf7JsAKn3pf6snqhBq8TxVJccIhTbS4ZgXQCgPSnw4KHDGhcaRqZ 4U3YL05/pW/WXRV5OEakT9NqG9eDqDrGe0kXYTbuqJX1BZ7v/QM8vBbQybYgfcUx qPXq450W/Vfi7ivJbSZkwpxTt8AKcdJxlZK6RNJ/3M3xl6xxuiEO98tZ0OCoRGIa NrnMkufa1zuXNfgjxcZ0/Q==
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d= messagingengine.com; h=cc:content-transfer-encoding:content-type :content-type:date:date:feedback-id:feedback-id:from:from :in-reply-to:in-reply-to:message-id:mime-version:references :reply-to:subject:subject:to:to:x-me-proxy:x-me-sender :x-me-sender:x-sasl-enc; s=fm3; t=1788258664; x=1788345064; bh=q 6C+UT/37E4to45zbD2wf24bMD+Slm//a7dgoAIh3fw=; b=Mn+14S+RcQeLZp/1x EiSOuB8aYYsNLCy9qB6YzhHVug0iLQZ8NXWBcNDnA8nWih54PJnrnVbu+83l9GOM 2JrY/PLAZBvudFy+G7PI3p3funMYOlVGeujR/+1UmiuPnraAqAC+H+D1ayRnM5nl 8fEAr1u93LmAk4vUNASzTwA8IFYtWFM4hH49G2sAzTyTz5KXcsd2Xw1d88jXNpmw ER3C9D0b4Sx2IFTa4cHWx5ynsc8AcEWYeSnw2YcsA3gloQkuRh6eOrEwlgVP5Bix 1b8u8IjR+99sP32qI/+y53RpLo7e86YZXrA8/cwgAwDuuBki0BeyK0XlLoZwpbd6 yZ5hg==
X-ME-Sender: <xms:aKmWam95DCVdcyrHtc0Xhlxhe7fpu-HCWIin9b_Y4Wou6VCMX7ww6A> <xme:aKmWahhCTAv3DTjSW87fSGkSBHm88NPtgIoJD0r7r2G_MGO6mC_RuJSOTZf_XsXxw Ekw8PfptEX17x_ZyiacOfZR6riqUflRmjIhnV4n1stPiGLfo0r1A9TQ>
X-ME-Proxy-Cause: dmFkZTFVYSQxVHfrMrG+ke/etCrRBxG98U/To4PzUo2jLW8qPOzth2rmEWRsKWhijlkVex gkzNxibIll4xvmb6gpB6t68FgzwaNgw3U2U5FWf13lN1k9WWhI2czEIzszTkzkpaWGGdqK 3YwtyeTVBPTRr0f27byX/pAhIyH2roDeoQfXB8gOuNjelC95PVeO+kBL/n1edP5DA8dKGq j+LgnJO+Qc9JWGtE8igd8/Jgk89YyGvZjRKNZAid5/0Wagr7PO/06bkLYHlp+SW3KTbVvZ AI+EVarGTA5dmhExi9+J5ePo+qsKX6pCoewUrMxOfOez057RbnGjmUcf74HXb97h6PWXP3 +V59J9PAVb9HDfNRBsmza5xeK7u2g89lzSyLIkis5dtgYPGmoe1305YZ0BMTVcWeivMKUz 5YaDzju39PcPTcRy4qlgA4CubMbWbBPvyOZgrHIAWQsZpHn0GZe7refwHu/Rf2tv4EFU+m Mgkk5LFN3THKtyr/D+XxEX6DQ4FGXgS8ExjpYrLrEh0AUqNDXFZMozfaSP0gitaxL93VV7 7/2WFZAmMD9nvVOqU3BBfBQwsVxdIhIPTX15pTuG9+23SPL9Y1rpksZVZKfeFnGfO9AKHV cpatR1sjv7cCqjz+0vKilJTzsIrm7UixNyrMX5ESwhpfejFFTs8Mki91J+ng
X-ME-Proxy: <xmx:aKmWaloatCKZbHyBPhmtv3XB5azGVkrfRRIqL89UR6RCosWPhGCYgQ> <xmx:aKmWalldLhVDG-5rH0QgMSQM5ts0F-Q8izCZFjESBTU7hNi6DEfgkg> <xmx:aKmWapwybtLlZUGwQBmDEgJXQlAD0TUEGOucDvlmEDklLWn7eg1ILA> <xmx:aKmWatmfyyefM3oMUdJjHX6cfoEf6-ewZ4hrJdi0HXt12ReSzQ9Eng> <xmx:aKmWarzcI_W00xkFRqwuY57ceZwTjjCk_2Sy8Bt03KfLxjBj4Zjw24y0>
Feedback-ID: ic129442d:Fastmail
Received: by mailuser.phl.internal (Postfix, from userid 501) id 452547811F0; Tue, 1 Sep 2026 06:31:04 -0400 (EDT)
X-Mailer: MessagingEngine.com Webmail Interface
MIME-Version: 1.0
X-ThreadId: ARmJxfb1O4Y-
Date: Tue, 01 Sep 2026 12:30:42 +0200
From: Martin Thomson <mt@lowentropy.net>
To: John Mattsson <john.mattsson=40ericsson.com@dmarc.ietf.org>, "<tls@ietf.org>" <tls@ietf.org>
Message-Id: <accc56e6-8f47-4ab1-921f-ae6682b275e2@app.fastmail.com>
In-Reply-To: <AS4PR07MB8825400913D55FC72959167389A82@AS4PR07MB8825.eurprd07.prod.outlook.com>
References: <AS4PR07MB8825400913D55FC72959167389A82@AS4PR07MB8825.eurprd07.prod.outlook.com>
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: quoted-printable
Message-ID-Hash: QXLP26YMFYDP4GF2EUGFC55EQK7AXURE
X-Message-ID-Hash: QXLP26YMFYDP4GF2EUGFC55EQK7AXURE
X-MailFrom: mt@lowentropy.net
X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; emergency; loop; banned-address; member-moderation; header-match-tls.ietf.org-0; header-match-tls.ietf.org-1; header-match-tls.ietf.org-2; header-match-tls.ietf.org-3; header-match-tls.ietf.org-4; nonmember-moderation; administrivia; implicit-dest; max-recipients; max-size; news-moderation; no-subject; digests; suspicious-header
X-Mailman-Version: 3.3.9rc6
Precedence: list
Subject: [TLS] Re: 3GPP requires TLS 1.2 support to be disabled by default
List-Id: "This is the mailing list for the Transport Layer Security working group of the IETF." <tls.ietf.org>
Archived-At: <https://mailarchive.ietf.org/arch/msg/tls/luUNCcHA6Zt1vaf5DsYq2gs12fw>
List-Archive: <https://mailarchive.ietf.org/arch/browse/tls>
List-Help: <mailto:tls-request@ietf.org?subject=help>
List-Owner: <mailto:tls-owner@ietf.org>
List-Post: <mailto:tls@ietf.org>
List-Subscribe: <mailto:tls-join@ietf.org>
List-Unsubscribe: <mailto:tls-leave@ietf.org>
Thanks for the good work you did here John. This is a good outcome. Hopefully we can iron out the DTLS 1.3 bumps in a reasonable timeframe so that this is not just the stream variant. On Tue, Sep 1, 2026, at 09:55, John Mattsson wrote: > Hi, > 3GPP has just decided that TLS 1.2 support shall be disabled by > default. Hopefully, that will help phase out the remaining TLS 1.2-only > nodes. TLS 1.3 has been mandatory since 2018. With the urgent migration > to PQC, (D)TLS 1.2 is not really an option anymore. And while TLS 1.2 > can be hardened, most TLS 1.2-only nodes are not. > > https://www.3gpp.org/ftp/Meetings_3GPP_SYNC/SA3/docs/S3-263562.zip > > Cheers, > John Preuß Mattsson > > > _______________________________________________ > TLS mailing list -- tls@ietf.org > To unsubscribe send an email to tls-leave@ietf.org
- [TLS] 3GPP requires TLS 1.2 support to be disable… John Mattsson
- [TLS] Re: 3GPP requires TLS 1.2 support to be dis… Martin Thomson
- [TLS] Re: 3GPP requires TLS 1.2 support to be dis… Eric Rescorla