Is TLS 1.3 still on track for "early 2018"? Are there any dates for release?
It looks like it's going live with Chrome 65 and the IETF have done "Last Call" (02/15/2018) before releasing the final spec.
according to TLS 1.3 FTW - The Akamai Blog there is a dependency:
The only thing missing was being able to commit to a delivery date, so that downstream consumers (such as Akamai) could dependably plan their own TLS 1.3 rollouts. Because of our sponsorship, OpenSSL will deliver TLS 1.3 on April 5, in a version compatible with 1.1.0. Akamai will begin incorporating this update into its systems soon thereafter.
So from that quote by Rich Salz I would not expect GA for TLS 1.3 before some time in Q2.
More details on this and the currently ongoing beta you can find in Get ready for TLS 1.3.
Does that help to some extend?
FWIW, we have been deploying the beta/early-draft versions of TLS 1.3 since before the moratorium, and we continue to do so. There’s an open beta if any customers are interested. I forget where/how to sign up, but Rajiv Manglani knows ☺
Thanks Rich and Gunther. I'll try to reach out to Rajiv to inquire about the beta as well
For those in the same boat wanting to try TLS 1.3 the Get ready for TLS 1.3 page will enable the TLS beta, but it may not work with any client at the moment. Akamai is running draft 21 of TLS 1.3. SSL Labs/Chrome are running different drafts (either 18 or 24) so won't be able to negotiate using TLS 1.3 with Akamai at the moment.
For a list of implementations and versions, see here: Implementations · tlswg/tls13-spec Wiki · GitHub
Everything will line up over the next couple of months that the TLS 1.3 spec is being finalised.
Retrieving data ...