[TLS] RFC 10015 on Deprecating Obsolete Key Exchange Methods in TLS 1.2 and DTLS 1.2

A new Request for Comments is now available in online RFC libraries.

        RFC 10015

        Title:      Deprecating Obsolete Key Exchange Methods in TLS 1.2 and DTLS 1.2
        Author:     N. Aviram
        Status:     Proposed Standard
        Stream:     IETF
        Date:       July 2026
        Mailbox:    nimrod.aviram@gmail.com
        Pages:      21
        Updates:    RFC 4162, RFC 4279, RFC 4346, RFC 4785, RFC 5246, RFC 5288, 
                    RFC 5289, RFC 5469, RFC 5487, RFC 5932, RFC 6209, RFC 6367, 
                    RFC 6347, RFC 6655, RFC 7905, RFC 8422, RFC 9325

        I-D Tag:    draft-ietf-tls-deprecate-obsolete-kex-08

        URL:        https://www.rfc-editor.org/info/rfc10015

        DOI:        10.17487/RFC10015

For (D)TLS 1.2, this document deprecates the use of two key exchanges, namely Diffie-Hellman (DH) over a finite field and RSA. It also discourages the use of static Elliptic Curve Diffie-Hellman (ECDH) cipher suites.

These prescriptions apply only to (D)TLS 1.2, since (D)TLS 1.0 and TLS 1.1 are deprecated by RFC 8996 and (D)TLS 1.3 either does not use the affected algorithms or does not share the relevant configuration options. (There is no DTLS version 1.1.)

This document updates RFCs 4162, 4279, 4346, 4785, 5246, 5288, 5289, 5469, 5487, 5932, 6209, 6347, 6367, 6655, 7905, 8422, and 9325 to either deprecate or discourage the use of cipher suites using the above key exchange methods in (D)TLS 1.2 connections.

This document is a product of the Transport Layer Security Working Group of the IETF.

STANDARDS TRACK: This document specifies an Internet Standards Track
protocol for the Internet community, and requests discussion and
suggestions for improvements. Distribution of this memo is unlimited.

This announcement is sent to the IETF-Announce and rfc-dist lists.
To subscribe or unsubscribe, see
  https://www.ietf.org/mailman/listinfo/ietf-announce
  https://mailman.rfc-editor.org/mailman/listinfo/rfc-dist

For searching the RFC series, see https://www.rfc-editor.org/search/
For downloading RFCs, see https://www.rfc-editor.org/series/rfc-download/

Requests for special distribution should be addressed to either the
author of the RFC in question, or to rfc-editor@rfc-editor.org.  Unless
specifically noted otherwise on the RFC itself, all RFCs are for
unlimited distribution.

The RFC Editor Team