For (D)TLS 1.2, this document deprecates the use of two key exchanges, namely Diffie-Hellman (DH) over
a finite field and RSA. It also discourages the use of static Elliptic Curve Diffie-Hellman (ECDH)
cipher suites.
These prescriptions apply only to (D)TLS 1.2, since (D)TLS 1.0 and TLS 1.1 are
deprecated by RFC 8996 and (D)TLS 1.3 either does not use the affected
algorithms or does not share the relevant configuration options.
(There is no DTLS version 1.1.)
This document updates RFCs 4162, 4279, 4346, 4785, 5246, 5288, 5289, 5469,
5487, 5932, 6209, 6347, 6367, 6655, 7905, 8422, and 9325 to either deprecate or
discourage the use of cipher suites using the above key exchange
methods in (D)TLS 1.2 connections.
