Original text:
Abstract <del> This document describes a number of changes to TLS and DTLS IANA registries that range from adding notes to the registry all the way to changing the registration policy.  These changes were mostly motivated by WG review of the TLS- and DTLS-related registries undertaken as part of the TLS 1.3 development process. </del>  <del> This document obsoletes RFC 8447 and updates the following RFCs: 3749, 5077, 4680, 5246, 5705, 5878, 6520, and 7301. </del>  1. This document instructs IANA to make changes to a number of the IANA registries related to Transport Layer Security (TLS) and Datagram <del> Transport Layer Security (DTLS). Most of the instructions included herein and previously included in RFC8447, which this document obsoletes, were motivated by the development of TLS 1.3 RFC8446.  The changes ranged from simple, e.g., adding notes, to complex, e.g., changing a registry's registration policy.  Instead of listing the changes and their rationale here in the introduction, each section provides rationale for the proposed change(s).  The instructions in this document revise the values of "Recommended" column, applies the new value to the registries, and adds this column as noted in orphaned-registries. There are also instructions to update references, including replacing references to RFC8446 with I-D.ietf-tls-rfc8446bis and RFC8447 with I-D.ietf-tls-rfc8447bis. This document proposes no changes to the registration policies for TLS Alerts I-D.ietf-tls-rfc8446bis, TLS ContentType I-D.ietf-tls- rfc8446bis, TLS HandshakeType I-D.ietf-tls-rfc8446bis, and TLS Certificate Status Types RFC6961 registries; the existing policies (Standards Action for the first three; IETF Review for the last), are appropriate for these one-byte code points because of their scarcity. </del>  2. 3. <del> For consistency amongst TLS registries, IANA has prepended "TLS" to the following registries: Application-Layer Protocol Negotiation (ALPN) Protocol IDs RFC7301, ExtensionType Values, Heartbeat Message Types RFC6520, and Heartbeat Modes RFC6520. IANA [SHALL update/has updated] the reference for these four registries to also refer to this document.  The remainder of this document will use the registry names with the "TLS" prefix. 4. Many of the TLS-related IANA registries had the registration procedure "IETF Consensus", which was changed to "IETF Review" by RFC8126.  To align with the new terminology, IANA has updated the following registries to "IETF Review": TLS Authorization Data Formats TLS Supplemental Data Formats (SupplementalDataType) This is not a universal change, as some registries originally defined with "IETF Consensus" are undergoing other changes either as a result of this document or RFC8422. IANA [SHALL update/has updated] the reference for these two registries to also refer to this document. 5. </del> The instructions in this document update the Recommended column, originally added in RFC8447 to add a third value, "D", indicating that a value is "Discouraged".  The permitted values are: might have consensus to leave an items marked as "N" on the basis of it having limited applicability or usage constraints. <del> D: Indicates that the item is discouraged and SHOULD NOT or MUST NOT be used.  This marking could be used to identify mechanisms that might result in problems if they are used, such as a weak cryptographic algorithm or a mechanism that might cause interoperability problems in deployment. </del>  <del> Setting the Recommended item to "Y" or "D" or changing a item whose current value is "Y" or "D" requires Standards Action RFC8126.  Not all items defined in Standards Track RFCs need to be marked as Recommended.  Changing the Recommended status of an item in a Standards Track RFC requires Standards Action RFC8126. </del>  <del> 6. </del>  <del> The nomenclature for the registry entries in the TLS ExtensionType Values registry correspond to the presentation language field name except for entry 35.  To ensure that the values in the registry are consistently identified in the registry, IANA: </del>  <del> has renamed entry 35 to "session_ticket (renamed from "SessionTicket TLS")" RFC5077. [SHALL replace] the references to RFC8447 with a reference to this document in the "Reference" column for entry 35. 7. </del>  In order to refect the changes in the Recommended column allocation, IANA SHALL update the TLS ExtensionType Values registry as follows: <del> Change the registry policy to: </del>  Add a reference to this document under the reference heading. Update the "Recommended" column with the changes as listed below. <del> This table has been generated by keeping existing "Y" and "N" entries except for "truncated_hmac" (4), "connection_id (deprecated)" (53), "reserved" (40) and "Reserved" (46) as "D".  A reference to this document SHALL be added to these entries. Update the following note on the recommended column 8. Experience has shown that the IETF Consensus registry policy for TLS Cipher Suites was too strict.  Based on WG consensus, the decision was taken to change the TLS Cipher Suites registry's registration policy to Specification Required while reserving a small part of the code space for Experimental and Private Use RFC8126.  Therefore, IANA has updated the TLS Cipher Suites registry's policy as follows: See expert-pool for additional information about the designated expert pool. The TLS Cipher Suites registry has grown significantly and will continue to do so.  To better guide those not intimately involved in TLS, IANA [SHALL update/has updated] the TLS Cipher Suites registry as follows: Added a "Recommended" column to the TLS Cipher Suites registry. The cipher suites that follow in the two tables are marked as "Y". All other cipher suites are marked as "N".  The "Recommended" column is assigned a value of "N" unless explicitly requested, and adding a value with a "Recommended" value of "Y" requires Standards Action RFC8126.  IESG Approval is REQUIRED for a Y->N transition. The cipher suites that follow are Standards Track server- authenticated (and optionally client-authenticated) cipher suites that are currently available in TLS 1.2. RFC EDITOR: The previous paragraph is for document reviewers and is not meant for the registry. The cipher suites that follow are Standards Track ephemeral pre- shared key cipher suites that are available in TLS 1.2. RFC EDITOR: The previous paragraph is for document reviewers and is not meant for the registry. The TLS 1.3 cipher suites specified by I-D.ietf-tls-rfc8446bis are not listed here; that document provides for their "Recommended" status. Despite the following behavior being misguided, experience has shown that some customers use the IANA registry as a checklist against which to measure an implementation's completeness, and some implementers blindly implement cipher suites.  Therefore, IANA has added the following warning to the registry: IANA has added the following note to ensure that those that focus on IANA registries are aware that TLS 1.3 I-D.ietf-tls-rfc8446bis uses the same registry but defines ciphers differently: IANA [SHALL add/has added] the following notes to document the rules for populating the "Recommended" column: IANA [SHALL add/has added] the following notes for additional information: IANA [SHALL update/has updated] the reference for this registry to refer to this document instead of RFC8447. 9. Similar to cipher suites, supported groups have proliferated over time, and some use the registry to measure implementations. Therefore, IANA [SHALL add/has added] a "Recommended" column with a "Y" for secp256r1, secp384r1, x25519, and x448, while all others are "N".  These "Y" groups are taken from Standards Track RFCs; RFC8422 elevates secp256r1 and secp384r1 to Standards Track.  Not all groups from RFC8422, which is Standards Track, are marked as "Y"; these groups apply to TLS 1.3 I-D.ietf-tls-rfc8446bis and previous versions of TLS.  The "Recommended" column is assigned a value of "N" unless explicitly requested, and adding a value with a "Recommended" value of "Y" requires Standards Action RFC8126.  IESG Approval is REQUIRED for a Y->N transition. IANA [SHALL add/has added] the following notes: Despite the following behavior being misguided, experience has shown that some customers use the IANA registry as a checklist against which to measure an implementation's completeness, and some implementers blindly implement supported group.  Therefore, IANA has added the following warning to the registry: </del>  <del> IANA [SHALL update/has updated] the reference for this registry to refer to this document instead of RFC8447. </del>  <del> The value 0 (0x0000) has been marked as reserved. 10. Experience has shown that the IETF Consensus registry policy for TLS ClientCertificateType Identifiers is too strict.  Based on WG consensus, the decision was taken to change the registration policy to Specification Required while reserving some of the code space for Standards Track usage and a small part of the code space for Private Use RFC8126.  Therefore, IANA has updated the TLS ClientCertificateType Identifiers registry's policy as follows: See expert-pool for additional information about the designated expert pool. </del>  <del> IANA [SHALL add/has added] the following notes: </del>  <del> 11. </del>  <del> To align with TLS implementations and to align the naming nomenclature with other Handshake message types, IANA: </del>  <del> has renamed entry 4 in the TLS HandshakeType registry to "new_session_ticket (renamed from NewSessionTicket)" RFC5077. </del>  <del> [SHALL replace/has replaced] a reference to RFC8447 with a reference to this document in the "Reference" column for entry 4 in the TLS HandshakeType registry. </del>  <del> 12. </del>  <del> To aid those reviewers who start with the IANA registry, IANA [SHALL add/has added]: </del>  <del> The following note to the TLS Exporter Labels registry: </del>  <del> A "Recommended" column to the TLS Exporter Labels registry.  The table that follows has been generated by marking Standards Track RFCs as "Y" and all others as "N".  The "Recommended" column is assigned a value of "N" unless explicitly requested, and adding a value with a "Recommended" value of "Y" requires Standards Action RFC8126.  IESG Approval is REQUIRED for a Y->N, Y->D, or D->Y|N transitions. </del>  <del> To provide additional information for the designated experts, IANA [SHALL add/has added] the following notes: </del>  <del> IANA [SHALL update/has updated] the reference for this registry to refer to refer to this document instead of RFC8447. </del>  <del> 13. </del>  <del> IANA has added the following entry to the TLS Alerts registry; the entry was omitted from the IANA instructions in RFC7301: </del>  <del> 14. </del>  <del> Experience has shown that the IETF Consensus registry policy for TLS Certificate Types is too strict.  Based on WG consensus, the decision was taken to change registration policy to Specification Required while reserving a small part of the code space for Private Use RFC8126.  Therefore, IANA has changed the TLS Certificate Types registry as follows: </del>  <del> Changed the registry policy to: </del>  <del> Added a "Recommended" column to the registry.  X.509 and Raw Public Key are "Y".  All others are "N".  The "Recommended" column is assigned a value of "N" unless explicitly requested, and adding a value with a "Recommended" value of "Y" requires Standards Action RFC8126.  IESG Approval is REQUIRED for a Y->N, Y->D, and D->Y|N transitions. </del>  <del> See expert-pool for additional information about the designated expert pool. </del>  <del> IANA [SHALL add/has added] the following note: </del>  <del> IANA [SHALL update/has updated] the reference for this registry to refer this document instead of RFC8447. </del>  <del> 15. </del>  <del> To make it clear that (D)TLS 1.3 has orphaned certain registries (i.e., they are only applicable to version of (D)TLS protocol versions prior to 1.3), IANA: </del>  <del> has added the following to the TLS Compression Method Identifiers registry RFC3749: </del>  <del> has added the following to the TLS HashAlgorithm RFC5246 and TLS SignatureAlgorithm registries RFC5246: </del>  <del> [SHALL update/has updated] the "Reference" field in the TLS Compression Method Identifiers, TLS HashAlgorithm and TLS SignatureAlgorithm registries to refer to this document instead of RFC8447. </del>  <del> has updated the TLS HashAlgorithm registry to list values 7 and 9-223 as "Reserved" and the TLS SignatureAlgorithm registry to list values 4-6 and 9-223 as "Reserved". </del>  <del> has added the following to the TLS ClientCertificateType Identifiers registry RFC5246: </del>  <del> Despite the fact that the TLS HashAlgorithm and SignatureAlgorithm registries are orphaned, it is still important to warn implementers of pre-TLS1.3 implementations about the dangers of blindly implementing cryptographic algorithms.  Therefore, IANA has added the following warning to the TLS HashAlgorithm and SignatureAlgorithm registries: </del>  Though TLS 1.0 and TLS 1.1 were deprecated RFC8996, TLS 1.2 will be <del> in use for some time.  IANA [SHALL update/has updated] the TLS HashAlgorithm, TLS SignatureAlgorithm, and TLS ClientCertificateTypes registries to add a "Recommended" column as follows: TLS HashAlgorithm registry: TLS SignatureAlgorithm registry: TLS ClientCertificateTypes registry: In the TLS HashAlgorithm, TLS SignatureAlgorithm, and TLS ClientCertificateTypes registries, all unassigned and reserved values have a "Recommended" that is blank. </del>  <del> 16. </del>  <del> IANA has added the following warning and note to the TLS SignatureScheme registry: </del>  <del> IANA [SHALL update/has updated] added the following notes to the TLS PskKeyExchangeMode registry: </del>  <del> 17. </del>  <del> Specification Required RFC8126 registry requests are registered after a three-week review period on the tls-reg-review@ietf.org [1] mailing list, on the advice of one or more designated experts.  However, to allow for the allocation of values prior to publication, the designated experts may approve registration once they are satisfied that such a specification will be published. </del>  <del> Registration requests sent to the mailing list for review SHOULD use an appropriate subject (e.g., "Request to register value in TLS bar registry"). </del>  <del> Within the review period, the designated experts will either approve or deny the registration request, communicating this decision to the review list and IANA.  Denials SHOULD include an explanation and, if applicable, suggestions as to how to make the request successful. Registration requests that are undetermined for a period longer than 21 days can be brought to the IESG's attention (using the iesg@ietf.org [2] mailing list) for resolution. </del>  <del> Criteria that SHOULD be applied by the designated experts includes determining whether the proposed registration duplicates existing functionality, whether it is likely to be of general applicability or useful only for a single application, and whether the registration description is clear. </del>  <del> IANA MUST only accept registry updates from the designated experts and SHOULD direct all requests for registration to the review mailing list. </del>  <del> It is suggested that multiple designated experts be appointed who are able to represent the perspectives of different applications using this specification, in order to enable broadly informed review of registration decisions.  In cases where a registration decision could be perceived as creating a conflict of interest for a particular Expert, that Expert SHOULD defer to the judgment of the other Experts. </del>  <del> 18. </del>  The change to Specification Required from IETF Review lowers the amount of review provided by the WG for cipher suites and supported taken as an endorsement of the cipher suite, extension, supported group, etc. <del> 19. </del>  This document is entirely about changes to TLS-related IANA registries. <del> 20.  References 20.1.  URIs [1] mailto:tls-reg-review@ietf.org [2] mailto:iesg@ietf.org </del>

Reviewer comments:
Updated introduction and recommended column section. Deleted some irrelevant sections.
Changed from obsolete to update.
Obsoleting RFC 8447 means duplicating a lot of text and making changes to it which makes the document have awkward wording and makes the changes difficult to follow. I think it would be clearer if it were an update and just listed the changes. see Extension Types PR
At IETF 115, there was general agreement that this document could be an update as opposed to an obsolete to make it easier on IANA.
These are nits.

Revised text:
Abstract  <ins> This document updates the changes to TLS and DTLS IANA registries made in RFC 8447.  It adds a new value "D" for discouraged to the recommended column of the selected TLS registries. </ins>  <ins> This document updates the following RFCs: 3749, 5077, 4680, 5246, 5705, 5878, 6520, 7301, and 8447. </ins> 1. This document instructs IANA to make changes to a number of the IANA registries related to Transport Layer Security (TLS) and Datagram  <ins> Transport Layer Security (DTLS).  These changes update the changes made in RFC8447. This specification updates the "Recommended" column in TLS registries to define a third value "D" for items that are discouraged. </ins> 2. 3.  The instructions in this document update the Recommended column, originally added in RFC8447 to add a third value, "D", indicating that a value is "Discouraged".  The permitted values are: might have consensus to leave an items marked as "N" on the basis of it having limited applicability or usage constraints.  <ins> D: Indicates that the item is discouraged.  This marking could be used to identify mechanisms that might result in problems if they are used, such as a weak cryptographic algorithm or a mechanism that might cause interoperability problems in deployment. Implementers SHOULD consult the linked references associated with the item to determine the conditions under which it SHOULD NOT or MUST NOT be used. </ins>  <ins> Setting a value to "Y" or "D" in the "Recommended" column requires IETF Standards Action RFC8126.  Any state transition to or from a "Y" or "D" value requires IESG Apporval.  Not all items defined in Standards Track RFCs need to be set to "Y" or "D".  Any item not otherwise specified is set to "N".  The column is blank for values that are unassigned or reserved unless specifically set. </ins>  <ins> 3.1. </ins>  <ins> Existing registries have a note on the meaning of the recommended column.  For the registries discussed in the subsequent sections this note is updated with a sentence describing the 'D' vaue as follows: </ins>  <ins> 4. </ins> In order to refect the changes in the Recommended column allocation, IANA SHALL update the TLS ExtensionType Values registry as follows:  <ins> Change the registration procedure to: </ins> Add a reference to this document under the reference heading. Update the "Recommended" column with the changes as listed below.  <ins> Entries keep their existing "Y" and "N" entries except for the entries in following table.  A reference to this document SHALL be added to these entries. </ins>  <ins> Update note on the recommended column with text in rec-note. </ins>  <ins> 5. </ins>  <ins> In order to refect the changes in the Recommended column allocation, IANA SHALL update the TLS ExtensionType Values registry as follows: </ins>  <ins> Change the registration procedure to: </ins>  <ins> Add a reference to this document under the reference heading. </ins>  <ins> Update the "Recommended" column with the changes as listed below. Entries keep their existing "Y" and "N" entries except for the entries in following table.  A reference to this document SHALL be added to these entries. </ins>  <ins> Update note on the recommended column with text in rec-note. </ins>  <ins> 6. </ins>  <ins> In order to refect the changes in the Recommended column allocation, IANA SHALL update the TLS Supported Groups registry as follows: </ins>  <ins> Update the registration policy to include: Add a reference to this document under the reference heading. Entries keep their existing Recommended column "Y" and "N" entries. </ins>  <ins> Update note on the recommended column with text in rec-note. </ins>  <ins> 7. </ins>  <ins> In order to refect the changes in the Recommended column allocation, IANA SHALL update the TLS Exporter Labels Registry as follows: </ins>  <ins> Update the registration procedure to include: </ins>  <ins> Add a reference to this document under the reference heading. </ins>  <ins> Entries keep their existing Recommended column "Y" and "N" entries </ins>  <ins> Update note on the recommended column with text in rec-note. </ins>  <ins> 8. </ins>  <ins> In order to refect the changes in the Recommended column allocation, IANA SHALL update the the TLS Certificate Types registry as follows: </ins>  <ins> Change the registration procedure to: </ins>  <ins> Add a reference to this document under the reference heading. </ins>  <ins> Entries keep their existing Recommended column "Y" and "N" entries. </ins>  <ins> Update note on the recommended column with text in rec-note. </ins>  <ins> 9. </ins>  <ins> Though TLS 1.0 and TLS 1.1 were deprecated RFC8996, TLS 1.2 will be in use for some time.  In order to refect the changes in the Recommended column allocation, IANA SHALL update the TLS HashAlgorithm Registry registry as follows: Update the registration procedure to include: Add a reference to this document under the reference heading. </ins>  <ins> Update the TLS HashAlgorithm registry to add a "Recommended" column as follows: Add note on the recommended column with text in rec-note. 10. </ins>  <ins> Though TLS 1.0 and TLS 1.1 were deprecated RFC8996, TLS 1.2 will be in use for some time.  In order to refect the changes in the Recommended column allocation, IANA SHALL update the TLS SignatureAlgorithm registry registry as follows: </ins>  <ins> Update the registration procedure to include: </ins>  <ins> Add a reference to this document under the reference heading. Update the TLS SignatureAlgorithm registry to add a "Recommended" column as follows: Add note on the recommended column with text in rec-note. </ins>  <ins> 11. </ins> Though TLS 1.0 and TLS 1.1 were deprecated RFC8996, TLS 1.2 will be  <ins> in use for some time.  In order to refect the changes in the Recommended column allocation, IANA SHALL update the TLS ClientCertificateTypes registry as follows: </ins>  <ins> Update the registration procedure to include: </ins>  <ins> Add a reference to this document under the reference heading. </ins>  <ins> Update the TLS ClientCertificateTypes registry to add a "Recommended" column as follows: </ins>  <ins> Add note on the recommended column with text in rec-note. </ins>  <ins> 12. </ins>  <ins> In order to refect the changes in the Recommended column allocation, IANA SHALL update the TLS PskKeyExchangeMode registry as follows: </ins>  <ins> Update the registration procedure to include: </ins>  <ins> Add a reference to this document under the reference heading. </ins>  <ins> Entries keep their existing recommended column "Y" and "N" entries. </ins>  <ins> Update note on the recommended column with text in rec-note. </ins>  <ins> 13. </ins> The change to Specification Required from IETF Review lowers the amount of review provided by the WG for cipher suites and supported taken as an endorsement of the cipher suite, extension, supported group, etc.  <ins> 14. </ins> This document is entirely about changes to TLS-related IANA registries.