IETF Freezes TLS 1.2 — Post-Quantum Crypto Will Require TLS 1.3 Upgrade

The Internet Engineering Task Force has formally frozen TLS 1.2 development in RFC 9851. No new features will be approved outside urgent security patches. Post-quantum cryptography support will require upgrading to TLS 1.3, marking a decisive push to modernize internet encryption infrastructure.

The Internet Engineering Task Force has closed the book on TLS 1.2 feature development. RFC 9851, published in July 2026, states that no changes will be approved for TLS 1.2 outside of urgent security fixes — and critically, post-quantum cryptography will never be backported to the older protocol.

Written by Rich Salz of Akamai Technologies and Nimrod Aviram, the RFC makes the IETF's position clear: TLS 1.3 fixes most known deficiencies in 1.2, including encrypting more traffic and removing weak cryptographic primitives. Crucially, TLS 1.3 "enjoys robust security proofs."

The post-quantum section is unambiguous. "PQC for TLS 1.2 will not be specified at any time; anyone wishing to deploy PQC should expect to use TLS 1.3." With NIST having released post-quantum cryptographic standards (ML-KEM, ML-DSA, SLH-DSA) in 2024, and IETF working groups actively building hybrid algorithm support for the transition, the message is clear: the future of encrypted communication runs on TLS 1.3 or later.

TLS 1.2 still carries an estimated 60-65% of global HTTPS traffic. This RFC doesn't deprecate it — servers can keep running it — but it removes any remaining incentive to stay. No new cipher suites, no quantum-safe handshakes, nothing beyond security patches. For enterprises and governments whose roadmaps include post-quantum readiness, the path now runs through TLS 1.3 exclusively.

The move also applies to TLS only, not DTLS, leaving room for UDP-based protocols to chart their own course. But for the web's primary encryption layer, the feature freeze is a quiet landmark: a standards body telling the internet it's time to move on.

Sources:

• RFC 9851 — TLS 1.2 is in Feature Freeze
• Hacker News discussion