{"guid":"a1a52c4c-8233-403b-8f04-db981df016c1","title":"Deploying TLS 1.3: the great, the good and the bad","subtitle":"Improving the encrypted the web, one round-trip at a time","slug":"33c3-8348-deploying_tls_1_3_the_great_the_good_and_the_bad","link":"https://fahrplan.events.ccc.de/congress/2016/Fahrplan/events/8348.html","description":"Transport Layer Security (TLS) 1.3 is almost here. The protocol that protects most of the Internet secure connections is getting the biggest ever revamp, and is losing a round-trip. We will explore differences between TLS 1.3 and previous versions in detail, focusing on the security improvements of the new protocol as well as some of the challenges we face around securely implementing new features such as 0-RTT resumption. At Cloudflare we will be the first to deploy TLS 1.3 on a wide scale, and we’ll be able to discuss the insights we gained while implementing and deploying this protocol.","original_language":"eng","persons":["Filippo Valsorda","Nick Sullivan"],"tags":["Security"],"view_count":5949,"promoted":false,"date":"2016-12-27T21:45:00.000+01:00","release_date":"2016-12-28T01:00:00.000+01:00","updated_at":"2026-04-16T10:00:05.909+02:00","length":3703,"duration":3703,"thumb_url":"https://static.media.ccc.de/media/congress/2016/8348-hd.jpg","poster_url":"https://static.media.ccc.de/media/congress/2016/8348-hd_preview.jpg","timeline_url":"https://static.media.ccc.de/media/congress/2016/a1a52c4c-8233-403b-8f04-db981df016c1-timeline.jpg","thumbnails_url":"https://static.media.ccc.de/media/congress/2016/a1a52c4c-8233-403b-8f04-db981df016c1-thumbnails.vtt","frontend_link":"https://media.ccc.de/v/33c3-8348-deploying_tls_1_3_the_great_the_good_and_the_bad","url":"https://api.media.ccc.de/public/events/a1a52c4c-8233-403b-8f04-db981df016c1","conference_title":"33C3: works for me","conference_url":"https://api.media.ccc.de/public/conferences/33c3","related":[{"event_id":3599,"event_guid":"c54bec28-0cec-4472-9a0f-36be8b626dd7","weight":49},{"event_id":3605,"event_guid":"61f9d4c6-a3de-4958-a57c-efcf941668fa","weight":33},{"event_id":3607,"event_guid":"64c07cb5-ec19-4972-a2c8-96c0e0df83c6","weight":33},{"event_id":3615,"event_guid":"74783236-46f4-493c-9574-1b27a44847b7","weight":30},{"event_id":3624,"event_guid":"600ca67d-e18d-49d8-8e5d-08d5b38ec528","weight":26},{"event_id":3626,"event_guid":"c3844820-b5ed-4b12-9094-cfc67aff60be","weight":29},{"event_id":3627,"event_guid":"143759c6-2cad-4fc8-a120-86dcc8de97e6","weight":50},{"event_id":3628,"event_guid":"4de841b2-0f34-494e-ba5b-0b79ba2c88cd","weight":26},{"event_id":3629,"event_guid":"686b1941-b211-4902-b4c4-1d642398e08b","weight":46},{"event_id":3632,"event_guid":"378cdf23-350b-4a05-afd0-6360139a7a06","weight":32},{"event_id":3633,"event_guid":"530f0400-e4e8-4d99-909d-4cfc8121c0b0","weight":46},{"event_id":3640,"event_guid":"700a07e7-a9c4-437b-a4c5-4491b23a9b4a","weight":59},{"event_id":3654,"event_guid":"ac80424a-f4dc-431d-95f3-3f85664ba2dc","weight":65},{"event_id":3656,"event_guid":"1a6657a2-b6c2-4acc-b8fc-5ec081c0877f","weight":40},{"event_id":3657,"event_guid":"4bff9cb3-9e91-4305-9029-f4d9053c7b5c","weight":30},{"event_id":3662,"event_guid":"8c32309e-7136-4899-8ee4-1558e63ad137","weight":62},{"event_id":3669,"event_guid":"7ef9172a-e2c7-4e78-9316-08449bd582c6","weight":26},{"event_id":3671,"event_guid":"4ef69e6a-026f-4b30-888d-af654b220a3d","weight":28},{"event_id":3689,"event_guid":"1f7eb981-2819-4824-8f40-4ddde0be7bf3","weight":32},{"event_id":3708,"event_guid":"aaec73e9-66b9-46d2-aa0f-9f43018198ea","weight":30},{"event_id":3731,"event_guid":"bc638f9f-0370-42f9-b83c-f85cca4ca38d","weight":33},{"event_id":3762,"event_guid":"25e2df7d-5740-4c2f-bc34-986326d606fe","weight":37}],"recordings":[{"size":null,"length":null,"mime_type":"application/x-subrip","language":"fin","filename":"33c3-8348-eng-deu-spa-Deploying_TLS_13_the_great_the_good_and_the_bad.fi.srt","state":"translated","folder":"","high_quality":true,"width":null,"height":null,"updated_at":"2025-01-06T19:30:58.514+01:00","recording_url":"https://cdn.media.ccc.de/congress/2016/33c3-8348-eng-deu-spa-Deploying_TLS_13_the_great_the_good_and_the_bad.fi.srt","url":"https://api.media.ccc.de/public/recordings/84425","event_url":"https://api.media.ccc.de/public/events/a1a52c4c-8233-403b-8f04-db981df016c1","conference_url":"https://api.media.ccc.de/public/conferences/33c3"},{"size":null,"length":null,"mime_type":"application/x-subrip","language":"eng","filename":"33c3-8348-eng-deu-spa-Deploying_TLS_13_the_great_the_good_and_the_bad.en.srt","state":"complete","folder":"","high_quality":true,"width":null,"height":null,"updated_at":"2020-01-03T19:22:46.389+01:00","recording_url":"https://cdn.media.ccc.de/congress/2016/33c3-8348-eng-deu-spa-Deploying_TLS_13_the_great_the_good_and_the_bad.en.srt","url":"https://api.media.ccc.de/public/recordings/44389","event_url":"https://api.media.ccc.de/public/events/a1a52c4c-8233-403b-8f04-db981df016c1","conference_url":"https://api.media.ccc.de/public/conferences/33c3"},{"size":null,"length":null,"mime_type":"text/vtt","language":"spa","filename":"a1a52c4c-8233-403b-8f04-db981df016c1-spa.vtt","state":"todo","folder":"","high_quality":true,"width":null,"height":null,"updated_at":"2021-06-04T12:43:02.957+02:00","recording_url":"https://cdn.media.ccc.de/congress/2016/a1a52c4c-8233-403b-8f04-db981df016c1-spa.vtt","url":"https://api.media.ccc.de/public/recordings/53386","event_url":"https://api.media.ccc.de/public/events/a1a52c4c-8233-403b-8f04-db981df016c1","conference_url":"https://api.media.ccc.de/public/conferences/33c3"},{"size":536,"length":3703,"mime_type":"video/mp4","language":"eng","filename":"33c3-8348-eng-Deploying_TLS_13_the_great_the_good_and_the_bad.mp4","state":"new","folder":"h264-hd","high_quality":true,"width":1920,"height":1080,"updated_at":"2016-12-28T00:54:41.958+01:00","recording_url":"https://cdn.media.ccc.de/congress/2016/h264-hd/33c3-8348-eng-Deploying_TLS_13_the_great_the_good_and_the_bad.mp4","url":"https://api.media.ccc.de/public/recordings/13667","event_url":"https://api.media.ccc.de/public/events/a1a52c4c-8233-403b-8f04-db981df016c1","conference_url":"https://api.media.ccc.de/public/conferences/33c3"},{"size":578,"length":3703,"mime_type":"video/mp4","language":"deu","filename":"33c3-8348-deu-Deploying_TLS_13_the_great_the_good_and_the_bad.mp4","state":"new","folder":"h264-hd","high_quality":true,"width":1920,"height":1080,"updated_at":"2016-12-28T00:56:04.204+01:00","recording_url":"https://cdn.media.ccc.de/congress/2016/h264-hd/33c3-8348-deu-Deploying_TLS_13_the_great_the_good_and_the_bad.mp4","url":"https://api.media.ccc.de/public/recordings/13668","event_url":"https://api.media.ccc.de/public/events/a1a52c4c-8233-403b-8f04-db981df016c1","conference_url":"https://api.media.ccc.de/public/conferences/33c3"},{"size":578,"length":3703,"mime_type":"video/mp4","language":"spa","filename":"33c3-8348-spa-Deploying_TLS_13_the_great_the_good_and_the_bad.mp4","state":"new","folder":"h264-hd","high_quality":true,"width":1920,"height":1080,"updated_at":"2016-12-28T00:57:33.038+01:00","recording_url":"https://cdn.media.ccc.de/congress/2016/h264-hd/33c3-8348-spa-Deploying_TLS_13_the_great_the_good_and_the_bad.mp4","url":"https://api.media.ccc.de/public/recordings/13669","event_url":"https://api.media.ccc.de/public/events/a1a52c4c-8233-403b-8f04-db981df016c1","conference_url":"https://api.media.ccc.de/public/conferences/33c3"},{"size":792,"length":3703,"mime_type":"video/mp4","language":"eng-deu-spa","filename":"33c3-8348-eng-deu-spa-Deploying_TLS_13_the_great_the_good_and_the_bad_hd.mp4","state":"new","folder":"h264-hd","high_quality":true,"width":1920,"height":1080,"updated_at":"2016-12-28T00:59:16.162+01:00","recording_url":"https://cdn.media.ccc.de/congress/2016/h264-hd/33c3-8348-eng-deu-spa-Deploying_TLS_13_the_great_the_good_and_the_bad_hd.mp4","url":"https://api.media.ccc.de/public/recordings/13670","event_url":"https://api.media.ccc.de/public/events/a1a52c4c-8233-403b-8f04-db981df016c1","conference_url":"https://api.media.ccc.de/public/conferences/33c3"},{"size":56,"length":3690,"mime_type":"audio/mpeg","language":"eng","filename":"33c3-8348-eng-Deploying_TLS_13_the_great_the_good_and_the_bad.mp3","state":"new","folder":"mp3","high_quality":false,"width":0,"height":0,"updated_at":"2016-12-28T15:40:51.324+01:00","recording_url":"https://cdn.media.ccc.de/congress/2016/mp3/33c3-8348-eng-Deploying_TLS_13_the_great_the_good_and_the_bad.mp3","url":"https://api.media.ccc.de/public/recordings/13806","event_url":"https://api.media.ccc.de/public/events/a1a52c4c-8233-403b-8f04-db981df016c1","conference_url":"https://api.media.ccc.de/public/conferences/33c3"},{"size":48,"length":3690,"mime_type":"audio/opus","language":"eng","filename":"33c3-8348-eng-Deploying_TLS_13_the_great_the_good_and_the_bad.opus","state":"new","folder":"opus","high_quality":false,"width":0,"height":0,"updated_at":"2016-12-28T16:05:23.752+01:00","recording_url":"https://cdn.media.ccc.de/congress/2016/opus/33c3-8348-eng-Deploying_TLS_13_the_great_the_good_and_the_bad.opus","url":"https://api.media.ccc.de/public/recordings/13843","event_url":"https://api.media.ccc.de/public/events/a1a52c4c-8233-403b-8f04-db981df016c1","conference_url":"https://api.media.ccc.de/public/conferences/33c3"},{"size":249,"length":3703,"mime_type":"video/mp4","language":"eng-deu-spa","filename":"33c3-8348-eng-deu-spa-Deploying_TLS_13_the_great_the_good_and_the_bad_sd.mp4","state":"new","folder":"h264-sd","high_quality":false,"width":720,"height":576,"updated_at":"2016-12-28T20:33:56.323+01:00","recording_url":"https://cdn.media.ccc.de/congress/2016/h264-sd/33c3-8348-eng-deu-spa-Deploying_TLS_13_the_great_the_good_and_the_bad_sd.mp4","url":"https://api.media.ccc.de/public/recordings/13995","event_url":"https://api.media.ccc.de/public/events/a1a52c4c-8233-403b-8f04-db981df016c1","conference_url":"https://api.media.ccc.de/public/conferences/33c3"},{"size":219,"length":3703,"mime_type":"video/webm","language":"eng-deu-spa","filename":"33c3-8348-eng-deu-spa-Deploying_TLS_13_the_great_the_good_and_the_bad_webm-sd.webm","state":"new","folder":"webm-sd","high_quality":false,"width":720,"height":576,"updated_at":"2016-12-28T20:34:27.757+01:00","recording_url":"https://cdn.media.ccc.de/congress/2016/webm-sd/33c3-8348-eng-deu-spa-Deploying_TLS_13_the_great_the_good_and_the_bad_webm-sd.webm","url":"https://api.media.ccc.de/public/recordings/13996","event_url":"https://api.media.ccc.de/public/events/a1a52c4c-8233-403b-8f04-db981df016c1","conference_url":"https://api.media.ccc.de/public/conferences/33c3"},{"size":493,"length":3703,"mime_type":"video/webm","language":"eng-deu-spa","filename":"33c3-8348-eng-deu-spa-Deploying_TLS_13_the_great_the_good_and_the_bad_webm-hd.webm","state":"new","folder":"webm-hd","high_quality":true,"width":1920,"height":1080,"updated_at":"2016-12-28T20:35:12.678+01:00","recording_url":"https://cdn.media.ccc.de/congress/2016/webm-hd/33c3-8348-eng-deu-spa-Deploying_TLS_13_the_great_the_good_and_the_bad_webm-hd.webm","url":"https://api.media.ccc.de/public/recordings/13997","event_url":"https://api.media.ccc.de/public/events/a1a52c4c-8233-403b-8f04-db981df016c1","conference_url":"https://api.media.ccc.de/public/conferences/33c3"}]}