Re: [TLS] Publication of draft-rhrd-tls-tls13-visibility-00

[Peter Gutmann <[e-mail]>]

Salz, Rich <[e-mail]> writes:

>None of those even require TLS 1.2 yet, and it is a decade old.  Do you think
>any of them will jump from 1.1 to 1.3?  What timetable do you think that will
>happen?  A decade?  Five years?

>From working with a lot of SCADA/embedded/IoT vendors, they hope to migrate
from TLS 1.0 to 1.2 within the next 5-10 years (note the "hope to ..." rather
than "have a fixed roadmap to ...", it's sort of a general brownian motion).
None of them, that I know of, have ever mentioned TLS 1.3.  In the same way
that HTTP/2 effectively forked HTTP, so I'm expecting TLS 1.3 to fork TLS.

>Again, what timetable do you think that will happen?

In SCADA, embedded, etc, I would say "never".  I know that predicting the
future is always risky :-), but if I had to put money on "1-2 years", "2-5
years", "5-10 years", or "beyond ten years", I'd put it on the latter, which
in effect means "never".

Peter.