A Detailed Look at RFC 8446 (a.k.a. TLS 1.3)
Aug 11, 2018Nick Sullivan

Summary
This post details the release and significance of TLS 1.3 (RFC 8446), highlighting its substantial security and performance improvements over previous TLS versions. It explains how TLS 1.3 addresses vulnerabilities inherent in TLS 1.2 (and earlier) by removing legacy features, fixing key exchange mechanisms (like RSA key exchange), and reducing handshake latency. This directly contributes to Cloudflare's ongoing efforts to provide robust website security by adopting and advocating for the latest, most secure encryption standards.
More from the Website Security & Threat Management trail
- We tested our own WAF with frontier AI models. Here’s what we found
- When scanners miss the attack: how Cloudflare Client-Side Security protects storefronts
- Introducing automatic remediation policies with Cloudflare CASB
- Introducing context-aware vulnerability discovery and remediation with Cloudflare Managed Defense and OpenAI Daybreak Models
- Introducing Adaptive Intelligence: undermining the economics of every bot attack