diff --git a/docs/3.0-migration-guide.md b/docs/3.0-migration-guide.md index a30e78677..6a21a653a 100644 --- a/docs/3.0-migration-guide.md +++ b/docs/3.0-migration-guide.md @@ -140,10 +140,13 @@ encouraging them to upgrade their software. Remove support for truncated HMAC --------------------------------- -This only affects TLS users who enabled `MBEDTLS_SSL_TRUNCATED_HMAC` -`MBEDTLS_SSL_TRUNCATED_HMAC_COMPAT` and used the truncated HMAC extension. -Please consider using a CCM-8 ciphersuite instead of the Truncated HMAC -extension, or convincing your peer to upgrade their version of Mbed TLS. +This affects users of truncated HMAC, that is, users who called +`mbedtls_ssl_conf_truncated_hmac( ..., MBEDTLS_SSL_TRUNC_HMAC_ENABLED)`, +regardless of whether the standard version was used or compatibility version +(`MBEDTLS_SSL_TRUNCATED_HMAC_COMPAT`). + +The recommended migration path for people who want minimal overhead is to use a +CCM-8 ciphersuite. Remove support for TLS record-level compression -----------------------------------------------