TLS 1.3 changes the design
05TLS 1.3 is a redesign, not merely a new suite name in the old handshake.
Terms in this drawing
This guide explains the 2008 publication. Superseded by RFC 8446, RFC 9846.
Related RFCs and changes
“Updates” changes part of an earlier RFC. “Obsoletes” replaces it. This list shows selected related documents.
DIAGRAM§ 1.2 ↗
RFC 5246 · § 1.2EXAMPLE
3 / 3
03
Deployment policy
Use current recommendations; historical mandatory suites are not today’s deployment checklist.
Protocol participantThreat or exceptionProtocol controlSimplified drawings · precise section references
RFC 5246RFC 8446 § 1.2
TLS 1.3 restructures the handshake and key schedule, encrypts messages after ServerHello, and removes legacy record and key-exchange options.
Read the updated RFC section ↗RFC 8446 obsoletes RFC 5246.
- RFC 8446 obsoletes RFC 5246.
- TLS 1.3 removes static RSA key exchange and requires AEAD records.
- Current deployment choices need later guidance such as RFC 9325.
The illustration is schematic. Example values are illustrative; profiles and later security guidance can add requirements.
Read the RFC section ↗Diagrams simplify the RFC. Read the linked sections for complete requirements.
Privacy