RFC 10015 deprecates the use of Diffie-Hellman over a finite field and RSA in TLS 1.2 and DTLS 1.2. It also discourages static ECDH cipher suites. These prescriptions apply only to TLS 1.2, as TLS 1.0 and 1.1 are already deprecated and TLS 1.3 does not use these algorithms.

The memo updates numerous RFCs to mark cipher suites that use these key exchanges as deprecated or discouraged. Non‑ephemeral DH lacks forward secrecy and is vulnerable to side‑channel attacks such as the Raccoon attack. RSA offers no forward secrecy and is susceptible to Bleichenbacher attacks; custom or small group DH (e.g., 1024‑bit) also creates interoperability and security gaps.

Clients and servers must not offer or select non‑ephemeral FFDH cipher suites in TLS 1.2 connections. The document references BCP 195 and updates RFC 9325, ensuring the IETF community’s consensus is reflected.

The memo’s status is Internet Standards Track; it has been approved by the IESG and is available for public review at the RFC editor site. The IETF Trust’s legal provisions apply, and any code must include the Revised BSD License.