Alan DeKok <[email protected]> wrote:
    > I have some questions for the people who propose making TLS 1.3 a SHOULD 
for new protocols:

Our (ANIMA) document already has TLS 1.3 as a SHOULD (and the ancedent document 
from
2021 said the same thing).   I was asked to make it a MUST, because 
uta-require-tls13.

Vendors violate MUSTs all the time; customers can use RFCs as big hammers to
insist.  It really does happen.

But, MUST do TLS 1.3 implies (to me), do *NOT* (refuse to) do TLS 1.2.
The only way to allow (MAY) TLS 1.2, is for TLS 1.3 to be SHOULD.

--
Michael Richardson <[email protected]>   . o O ( IPv6 IøT consulting )
           Sandelman Software Works Inc, Ottawa and Worldwide




Attachment: signature.asc
Description: PGP signature

_______________________________________________
Anima mailing list -- [email protected]
To unsubscribe send an email to [email protected]

Reply via email to