The IESG has approved the following document: - 'Deprecating Secure Sockets Layer Version 3.0' (draft-ietf-tls-sslv3-diediedie-03.txt) as Best Current Practice This document is the product of the Transport Layer Security Working Group. The IESG contact persons are Stephen Farrell and Kathleen Moriarty. A URL of this Internet Draft is: http://datatracker.ietf.org/doc/draft-ietf-tls-sslv3-diediedie/ Technical Summary Secure Sockets Layer version 3.0 (SSLv3) is no longer secure. This document requires that SSLv3 not be used. The replacement versions, in particular Transport Layer Security (TLS) 1.2, are considerably more secure and capable protocols. This document updates the backward compatibility sections of the TLS RFCs to prohibit fallback to SSLv3. Working Group Summary This document has been actively reviewed by the TLS working group. There is strong community consensus behind the document. Document Quality Are there existing implementations of the protocol? Yes, and that's the problem;-) However, many deployments and implementations have already started disabling SSLv3. Personnel Joseph Salowey is the document shepherd. Stephen Farrell is the responsible AD for this document.
