RFC 6176

E51131

RFC 6176 is an Internet Engineering Task Force (IETF) standard that formally disallows the use of the obsolete and insecure SSL 2.0 protocol in TLS implementations.

Jump to: Statements Referenced by

Statements (31)

Predicate Object
instanceOf Internet standard
RFC
addresses backward compatibility with SSL 2.0
appliesTo TLS clients
TLS implementations
TLS servers
area Security
category Standards Track
definesPolicyFor use of SSL 2.0 in TLS
disallowsUseOf SSL 2.0
documentType Standards Track RFC
focusesOn transport layer security
language English
mandates TLS clients and servers MUST NOT negotiate SSL 2.0
obsoletesProtocolVersion SSL 2.0
publishedBy Internet Engineering Task Force
surface form: IETF

Internet Engineering Task Force
publisher RFC Editor
purpose to formally prohibit the negotiation of SSL 2.0 in TLS
reason SSL 2.0
surface form: SSL 2.0 is insecure

SSL 2.0
surface form: SSL 2.0 is obsolete
relatedProtocol SSL
SSL
surface form: Secure Sockets Layer

TLS
TLS
surface form: Transport Layer Security
securityProperty removal of weak protocol version
standardizes prohibition of SSL 2.0 in TLS
status Proposed Standard
stream IETF Stream
title Prohibiting Secure Sockets Layer (SSL) Version 2.0
updatesSpecification TLS implementations

Referenced by (1)

Full triples — surface form annotated when it differs from this entity's canonical label.

SSL 2.0 prohibitedBy RFC 6176