--- title: RFC 9851: TLS 1.2 is in Feature Freeze | daily.dev description: RFC 9851 officially places TLS 1.2 in feature freeze. Going forward, no new extensions or cryptographic algorithms will be added to TLS 1.2 registries; only... canonical: https://daily.dev/posts/rfc-9851-tls-1-2-is-in-feature-freeze-lyqfoxybu twitter:card: summary_large_image twitter:site: @dailydotdev og:type: website og:site_name: daily.dev og:title: RFC 9851: TLS 1.2 is in Feature Freeze | daily.dev og:description: RFC 9851 officially places TLS 1.2 in feature freeze. Going forward, no new extensions or cryptographic algorithms will be added to TLS 1.2 registries; only... og:url: https://daily.dev/posts/rfc-9851-tls-1-2-is-in-feature-freeze-lyqfoxybu og:image: https://api.daily.dev/og/posts/LYQFoxYBu.png og:image:alt: RFC 9851: TLS 1.2 is in Feature Freeze og:image:width: 1200 og:image:height: 630 og:locale: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # RFC 9851: TLS 1.2 is in Feature Freeze **[Hacker News](https://daily.dev/sources/hn)** · 5 min read · 0 upvotes · 0 comments ## Summary RFC 9851 officially places TLS 1.2 in feature freeze. Going forward, no new extensions or cryptographic algorithms will be added to TLS 1.2 registries; only urgent security fixes, new TLS Exporter Labels, and new ALPN Protocol IDs are permitted. The freeze does not affect DTLS. A key motivation is post-quantum cryptography (PQC): NIST finalized PQC standards (ML-KEM, ML-DSA, SLH-DSA) in 2024, and the TLS Working Group is focusing all PQC work exclusively on TLS 1.3 or later. Operators and developers wishing to deploy post-quantum algorithms must migrate to TLS 1.3. IANA registries for TLS have been annotated to reflect that new entries are intended for TLS 1.3 or later. ## Full article daily.dev links to this article rather than hosting it. Read it at the original source: ## Questions this post answers ### What does it mean that TLS 1.2 is in feature freeze under RFC 9851? It means the IETF TLS Working Group will no longer approve changes to TLS 1.2, except for urgent security fixes determined by working group consensus, new TLS Exporter Labels, and new ALPN Protocol IDs. New entries added to most TLS IANA registries after RFC 9851's approval will be marked as intended for TLS 1.3 or later. The freeze applies only to TLS, not DTLS. _Teams planning TLS upgrades can track protocol changes like this via daily.dev._ ### Will post-quantum cryptography be supported in TLS 1.2? No, post-quantum cryptography will not be specified for TLS 1.2 at any time. The TLS Working Group's PQC efforts are focused exclusively on TLS 1.3 or later, so anyone wishing to deploy post-quantum cryptography must use TLS 1.3 or a newer version instead of TLS 1.2. _Developers planning post-quantum readiness can follow TLS protocol updates on daily.dev._ ## Similar posts on daily.dev - [TLS 1.3 includes welcome improvements, still has problems](https://daily.dev/posts/tls-1-3-includes-welcome-improvements-still-has-problems-kc9ak7ahe) · The Register · 0 upvotes · 0 comments - [RFC 10015: Deprecating Obsolete Key Exchange Methods in TLS 1.2 and DTLS 1.2](https://daily.dev/posts/rfc-10015-deprecating-obsolete-key-exchange-methods-in-tls-1-2-and-dtls-1-2-f09q3wd0n) · Hacker News · 0 upvotes · 1 comments - [Is your domain using post-quantum encryption? Now you can see for yourself](https://daily.dev/posts/is-your-domain-using-post-quantum-encryption-now-you-can-see-for-yourself-utdvgngep) · Cloudflare · 0 upvotes · 0 comments - [Post-Quantum Cryptography in Long-Term Support JDK Releases](https://daily.dev/posts/post-quantum-cryptography-in-long-term-support-jdk-releases-cm66jvqjw) · Inside Java · 0 upvotes · 0 comments - [Java 27 gets its first feature](https://daily.dev/posts/java-27-gets-its-first-feature-fybiawlum) · InfoWorld · 0 upvotes · 0 comments --- Tags: [#quantum-computing](https://daily.dev/tags/quantum-computing), [#cryptography](https://daily.dev/tags/cryptography) [View this post on daily.dev](https://daily.dev/posts/rfc-9851-tls-1-2-is-in-feature-freeze-lyqfoxybu) ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@type":"TechArticle","headline":"RFC 9851: TLS 1.2 is in Feature Freeze","url":"https://daily.dev/posts/rfc-9851-tls-1-2-is-in-feature-freeze-lyqfoxybu","mainEntityOfPage":{"@type":"WebPage","@id":"https://daily.dev/posts/rfc-9851-tls-1-2-is-in-feature-freeze-lyqfoxybu"},"datePublished":"2026-08-03T08:38:26.577Z","dateModified":"2026-09-13T21:07:41.343Z","description":"RFC 9851 officially places TLS 1.2 in feature freeze. Going forward, no new extensions or cryptographic algorithms will be added to TLS 1.2 registries; only...","image":"https://media.daily.dev/image/upload/s--HRgLpUt6--/f_auto/v1722860399/public/Placeholder%2003","thumbnailUrl":"https://media.daily.dev/image/upload/s--HRgLpUt6--/f_auto/v1722860399/public/Placeholder%2003","isAccessibleForFree":true,"articleSection":"Hacker News","inLanguage":"en","publisher":{"@type":"Organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180}},"author":{"@type":"Organization","name":"Hacker News","logo":"https://media.daily.dev/image/upload/t_logo,f_auto/v1/logos/hn","url":"https://daily.dev/sources/hn"},"commentCount":0,"discussionUrl":"https://daily.dev/posts/rfc-9851-tls-1-2-is-in-feature-freeze-lyqfoxybu","interactionStatistic":[{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":0},{"@type":"InteractionCounter","interactionType":{"@type":"CommentAction"},"userInteractionCount":0}],"keywords":"quantum-computing,cryptography","timeRequired":"PT5M"} {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"Hacker News","item":"https://daily.dev/sources/hn"},{"@type":"ListItem","position":3,"name":"RFC 9851: TLS 1.2 is in Feature Freeze"}]} {"@context":"https://schema.org","@type":"FAQPage","@id":"https://daily.dev/posts/rfc-9851-tls-1-2-is-in-feature-freeze-lyqfoxybu#faq","mainEntity":[{"@type":"Question","name":"What does it mean that TLS 1.2 is in feature freeze under RFC 9851?","acceptedAnswer":{"@type":"Answer","text":"It means the IETF TLS Working Group will no longer approve changes to TLS 1.2, except for urgent security fixes determined by working group consensus, new TLS Exporter Labels, and new ALPN Protocol IDs. New entries added to most TLS IANA registries after RFC 9851's approval will be marked as intended for TLS 1.3 or later. The freeze applies only to TLS, not DTLS. Teams planning TLS upgrades can track protocol changes like this via daily.dev."}},{"@type":"Question","name":"Will post-quantum cryptography be supported in TLS 1.2?","acceptedAnswer":{"@type":"Answer","text":"No, post-quantum cryptography will not be specified for TLS 1.2 at any time. The TLS Working Group's PQC efforts are focused exclusively on TLS 1.3 or later, so anyone wishing to deploy post-quantum cryptography must use TLS 1.3 or a newer version instead of TLS 1.2. Developers planning post-quantum readiness can follow TLS protocol updates on daily.dev."}}]} ```