Re: [TLS] Protocol Action: 'Deprecating Secure Sockets Layer Version 3.0' to Best Current Practice (draft-ietf-tls-sslv3-diediedie-03.txt)

Good job folks - thanks! Keep up the deprecating please:-)

Cheers,
S.

On 13/04/15 19:02, The IESG wrote:
> The IESG has approved the following document:
> - 'Deprecating Secure Sockets Layer Version 3.0'
>   (draft-ietf-tls-sslv3-diediedie-03.txt) as Best Current Practice
> 
> This document is the product of the Transport Layer Security Working
> Group.
> 
> The IESG contact persons are Stephen Farrell and Kathleen Moriarty.
> 
> A URL of this Internet Draft is:
> http://datatracker.ietf.org/doc/draft-ietf-tls-sslv3-diediedie/
> 
> 
> 
> 
> 
> Technical Summary
> 
>    Secure Sockets Layer version 3.0 (SSLv3) is no longer secure.  This
>    document requires that SSLv3 not be used.  The replacement versions,
>    in particular Transport Layer Security (TLS) 1.2, are considerably
>    more secure and capable protocols.
> 
>    This document updates the backward compatibility sections of the TLS
>    RFCs to prohibit fallback to SSLv3.
> 
> Working Group Summary
> 
>    This document has been actively reviewed by the TLS working 
>    group.  There is strong community consensus behind the document.  
> 
> Document Quality
> 
>    Are there existing implementations of the protocol?  Yes, and
>    that's the problem;-)    However, many deployments and 
>    implementations have already started disabling SSLv3.  
> 
> Personnel
> 
>    Joseph Salowey is the document shepherd.
>    Stephen Farrell is the responsible AD for this document.   
> 
> _______________________________________________
> TLS mailing list
> TLS@ietf.org
> https://www.ietf.org/mailman/listinfo/tls
> 