Using TLS to protect data
NCSC guidance urges TLS 1.3 with hybrid post-quantum key exchange and retirement of legacy SSL and TLS.
The UK NCSC published administrator guidance on configuring TLS securely and moving toward post-quantum cryptography. It recommends TLS 1.3 hybrid key exchange, including X25519MLKEM768 or SecP256r1MLKEM768 with TLS_AES_128_GCM_SHA256, and says only correctly configured TLS 1.3 protects against quantum attacks. TLS 1.2 can still resist classical attacks with recommended profiles but should be migrated; SSL and TLS 1.0/1.1 must be disabled. Post-quantum authentication is not yet standardized for the public Web PKI, so that advice will follow later.
- Only correctly configured TLS 1.3 resists quantum attacks.
- Recommended hybrids include X25519MLKEM768 and SecP256r1MLKEM768.
- Disable all SSL plus TLS 1.0 and TLS 1.1.
- Post-quantum TLS authentication is not yet standardized.
- Patch servers and clients against implementation flaws.
- Products
- TLS
- Countries
- United Kingdom
From the original article
13 min read at ncsc.gov.uk
Recommended profiles to securely configure TLS for the most common versions and scenarios, with additional guidance for managing older versions.
ncsc.gov.uk
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.