{"id":3488,"date":"2017-02-06T14:43:17","date_gmt":"2017-02-06T19:43:17","guid":{"rendered":"https:\/\/www.thesslstore.com\/blog\/?p=3488"},"modified":"2020-08-25T10:17:58","modified_gmt":"2020-08-25T14:17:58","slug":"openssl-tls-1-3-april-5","status":"publish","type":"post","link":"https:\/\/www.thesslstore.com\/blog\/openssl-tls-1-3-april-5\/","title":{"rendered":"Most Of The World Will Have Access To TLS 1.3 On April 5th"},"content":{"rendered":"

OpenSSL TLS 1.3 will release in April.<\/h2>\n

We have been talking about TLS 1.3 for a while. It the first new version of the TLS protocol in nearly a decade and is going to be a huge leap forward for the industry. It is sort of like releasing a decade\u2019s worth of advances and improvements in cryptography all at once.<\/p>\n

The IETF (Internet Engineering Task Force) is in charge of designing the TLS protocol. They have almost finished version 1.3\u2019s protocol specification \u2013 which is currently in \u201cLast Call,\u201d meaning that they are soliciting final comments from the community before officially stamping it as complete.<\/p>\n

But the TLS 1.3 protocol specifications only tells you how TLS 1.3 should work. It\u2019s essentially a manual that anyone who wants to implement TLS 1.3 needs to follow. Which means that \u201cfinishing\u201d the protocol does not get us any closer to actually using it. The code still needs to be written, and existing TLS libraries need to be updated and deployed.<\/p>\n

There have been some early adopters of TLS 1.3. Cloudflare is already using the protocol<\/a> despite it not being officially finalized, and some libraries have already been updated. However, the most widely used TLS library, OpenSSL, has not.<\/p>\n<\/span>\n

This means that most websites won\u2019t be able to use TLS 1.3 until OpenSSL adds support, regardless of when the IETF finalizes the spec. There had been some speculation that this could take more than 6 months.<\/p>\n

But Rich Salz recently shared good news about TLS 1.3 support in OpenSSL. Salz works on the OpenSSL development team and is an employee at Akamai (a major CDN\/Cloud-computing provider). Last week he announced that Akamai would be sponsoring the development of TLS 1.3 support for OpenSSL<\/a>. As an open-source project, OpenSSL relies on donations and sponsorships to support continued development.<\/p>\n

In addition, the OpenSSL team has committed to a release date. TLS 1.3 will be added to OpenSSL 1.1.1, which will be released on April 5th<\/sup>, 2017.<\/p>\n

When OpenSSL 1.1.1 releases in April, the internet won\u2019t magically flip over to TLS 1.3 overnight. The millions of websites using OpenSSL will first need to update to the new version. For those working with more complicated stacks, major version updates are no small feat.<\/p>\n

But the good news is that OpenSSL 1.1.1 will be fully compatible with the current release, 1.1.0. That\u2019s why Salz recommends that you get version 1.1.0 in place now, and when 1.1.1 is released, you can \u201cdrop it in\u201d and immediately have TLS 1.3 support.<\/p>\n

The industry has been brimming recently over the adoption of TLS 1.3. This announcement from OpenSSL and Akamai is a major step in making that a reality.<\/p>\n","protected":false},"excerpt":{"rendered":"

OpenSSL TLS 1.3 will release in April. We have been talking about TLS 1.3 for a while. It the first new version of the TLS protocol in nearly a decade…<\/p>\n","protected":false},"author":2,"featured_media":3490,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"inline_featured_image":false,"footnotes":"","tve_updated_post":"","tve_custom_css":"","tve_user_custom_css":"","tve_globals":{},"tcb2_ready":0,"tcb_editor_enabled":0,"tve_landing_page":"","_tve_header":"","_tve_footer":""},"categories":[130],"tags":[182,259,444,136,161,214,443],"class_list":["post-3488","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-everything-encryption","tag-encryption","tag-open-ssl","tag-openssl-1-1-1","tag-ssl","tag-tls","tag-tls-1-3","tag-tls-1-3-support","post-with-tags"],"views":22239,"jetpack_featured_media_url":"https:\/\/www.thesslstore.com\/blog\/wp-content\/uploads\/2017\/02\/iStock-617398610.jpg","_links":{"self":[{"href":"https:\/\/www.thesslstore.com\/blog\/wp-json\/wp\/v2\/posts\/3488","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.thesslstore.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.thesslstore.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.thesslstore.com\/blog\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.thesslstore.com\/blog\/wp-json\/wp\/v2\/comments?post=3488"}],"version-history":[{"count":0,"href":"https:\/\/www.thesslstore.com\/blog\/wp-json\/wp\/v2\/posts\/3488\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.thesslstore.com\/blog\/wp-json\/wp\/v2\/media\/3490"}],"wp:attachment":[{"href":"https:\/\/www.thesslstore.com\/blog\/wp-json\/wp\/v2\/media?parent=3488"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.thesslstore.com\/blog\/wp-json\/wp\/v2\/categories?post=3488"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.thesslstore.com\/blog\/wp-json\/wp\/v2\/tags?post=3488"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}