The National Institute of Standards and Technology (NIST) has released its Security Publication (SP) 800-52 Rev. 2: Guidelines for the Selection, Configuration, and Use of Transport Layer Security (TLS) Implementations.
NIST SP 800-52 Rev. 2 is the latest guidelines published August 29, 2019 after two previous Draft versions were released in 2017 and 2018.
NIST provides the following abstract for SP 800-52 Rev.2:
“Transport Layer Security (TLS) provides mechanisms to protect data during electronic dissemination across the Internet. This Special Publication provides guidance to the selection and configuration of TLS protocol implementations while making effective use of Federal Information Processing Standards (FIPS) and NIST-recommended cryptographic algorithms. It requires that TLS 1.2 configured with FIPS-based cipher suites be supported by all government TLS servers and clients and requires support for TLS 1.3 by January 1, 2024. This Special Publication also provides guidance on certificates and TLS extensions that impact security.”
NIST
Readers can also check out additional NIST guidelines published on our Standards and Guidelines page.