EmbeddingGemma 2: an open, lightweight multimodal embedding model
deepmind.google·6d ago
AI Engineering
Hacker News·Aug 3·5 min read
RFC 9851: TLS 1.2 is in Feature Freeze
TL;DR
RFC 9851 announces that TLS 1.2 is now in feature freeze, allowing only urgent security fixes and specific updates. This shift emphasizes the growing adoption of TLS 1.3, which addresses known issues in TLS 1.2.
✦ Why It Matters
Evaluate your systems to plan migration from TLS 1.2 to TLS 1.3 for improved security.
Key Takeaways
- Transition to TLS 1.3 for improved security features.
- Implement urgent security fixes for TLS 1.2 if still in use.
- Stay informed about post-quantum cryptography developments.
- Review and update TLS registry entries as per RFC 9851.
Full Summary
The Internet Engineering Task Force (IETF) has declared TLS 1.2 to be in feature freeze, meaning no new changes will be made except for urgent security fixes and specific updates like new TLS Exporter Labels and Application-Layer Protocol Negotiation (ALPN) Protocol IDs. This decision comes as the use of TLS 1.3 increases, which offers enhanced security features, including better encryption and the removal of weak cryptographic methods.
The document emphasizes that any future developments in post-quantum cryptography (PQC) will focus solely on TLS 1.3 and later versions, as TLS 1.2 will not support these advancements. Additionally, the document modifies how entries can be added to TLS registries, ensuring that new entries are intended for TLS 1.3 or later.
This shift highlights the urgency for organizations to transition to TLS 1.3 to maintain robust security against evolving threats.