627 ## SSL  section in Migrating from Mbed TLS 2.x to Mbed TLS 3.0
629 ### Remove support for TLS 1.0, 1.1 and DTLS 1.0
656 ### Remove support for SSL 3.0
666 ### Remove support for parsing SSLv2 ClientHello
676 ### Remove support for truncated HMAC
686 ### Remove support for TLS record-level compression
698 ### Remove support for TLS RC4-based ciphersuites
708 ### Remove support for TLS single-DES ciphersuites
717 ### Remove support for TLS record-level hardware acceleration
726 ### Remove config option `MBEDTLS_SSL_DEFAULT_TICKET_LIFETIME`
733 …bine the `MBEDTLS_SSL_CID_PADDING_GRANULARITY` and `MBEDTLS_SSL_TLS1_3_PADDING_GRANULARITY` options
747 ### TLS now favors faster curves over larger curves
753 ### SSL key export interface change
789 ### Remove MaximumFragmentLength (MFL) query API
800 ### Relaxed semantics for PSK configuration
818 ### Remove the configuration to enable weak ciphersuites in SSL / TLS
830 ### Remove the `MBEDTLS_SSL_MAX_CONTENT_LEN` configuration option
840 ### Remove the SSL API `mbedtls_ssl_get_session_pointer()`
863 ### Remove `MBEDTLS_SSL_DTLS_BADMAC_LIMIT` option
874 ### Deprecated functions were removed from SSL
884 ### Remove `MBEDTLS_SSL_RECORD_CHECKING` option and enable its action by default
897 ### Session Cache API Change
925 ### Changes in the SSL error code space
968 ### Modified semantics of `mbedtls_ssl_{get,set}_session()`
998 ### Turn `MBEDTLS_SSL_SRV_RESPECT_CLIENT_PREFERENCE` configuration option into a runtime option
1012 ### Strengthen default algorithm selection for X.509 and TLS
1030 ### Remove 3DES ciphersuites