3 ms·
Yes, TLS 1.3 is still in draft[1]. Heard from a co-worker on Friday (@grittygrease) that draft 14 should be arriving very soon. We (CloudFlare) have implemented
by prdonahue 10y ago
Yes, TLS 1.3 is still in draft[1]. Heard from a co-worker on Friday (@grittygrease) that draft 14 should be arriving very soon. We (CloudFlare) have implemented draft 13 in go and are actively testing it—try browsing https://tls13.cloudflare.com https://tls13.cloudflare.com with Firefox nightly[2].
I think BoringSSL is also[3] working on their implementation and NSS (Firefox's SSL/TLS library) implemented[4] draft 11 in v3.23, but OpenSSL doesn't have plans to until after 1.1 ships[5]; I've heard the former is expected to land about 6 months prior to the latter as OpenSSL isn't starting until the RFC is finalized.
1 - https://tools.ietf.org/html/draft-ietf-tls-tls13-11 https://tools.ietf.org/html/draft-ietf-tls-tls13-11 (draft 13)
2 - https://nightly.mozilla.org/ https://nightly.mozilla.org/
3 - https://www.imperialviolet.org/2015/10/17/boringssl.html https://www.imperialviolet.org/2015/10/17/boringssl.html
4 - https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.23_release_notes https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NS...
5 - https://www.openssl.org/policies/roadmap.html https://www.openssl.org/policies/roadmap.html
- oconnore 10y agohttp://i.imgur.com/hMqpkev.png http://i.imgur.com/hMqpkev.png
- elithrar 10y agoPat missed one bit: you need to head to about:config and set "security.tls.version.max" to 4.
- prdonahue 10y agoGood point. You'd figure I'd remember this after Nick put it on the monster video wall: http://imgur.com/cf28rpt http://imgur.com/cf28rpt ;)
- prdonahue 10y agoThink draft 13 is only deployed internally (as we're dogfooding it). Draft 11 is what's live unless you're on VPN. Nick (https://twitter.com/grittygrease https://twitter.com/grittygrease) can confirm.
- grittygrease 10y agotls13.cloudflare.com now speaks draft 13