Dear Mbed TLS Team,

Thank you for the announcement and for the work that has gone into maintaining Mbed TLS over the years.

Given that the maintenance of the TLS and X.509 libraries is currently uncertain beyond April 2027, I would like to ask for your recommendation regarding new projects.

Should Mbed TLS still be considered a recommended choice for new designs starting today, or would you advise organizations to evaluate alternative TLS stacks until the long-term maintenance situation becomes clearer?

I believe guidance from the maintainers on this point would be very valuable for companies making technology decisions with product lifecycles extending well beyond 2027.

Thank you in advance for your clarification.

Kind regards,
Massimiliano Cialdi



Massimiliano Cialdi
FIRMWARE ENGINEERING PROFESSIONAL LEADER

Powersoft S.p.A.
Via E. Conti, 5 - Scandicci (FI) 50018 - Italy
OFFICE:    +39 055 7350230
2.png3.png4.png5.png6.png7.png8.png9.png

PWS rgb N.png

From: Janos Follath via Mbed-tls-announce via mbed-tls <mbed-tls@lists.trustedfirmware.org>
Sent: Thursday, 8 October 2026 20:31
To: mbed-tls-announce@lists.trustedfirmware.org <mbed-tls-announce@lists.trustedfirmware.org>
Subject: [mbed-tls] [Mbed-tls-announce] Announcement: Future Maintenance of Mbed TLS
 
Dear Mbed TLS Users,

We are preparing for a transition in the maintenance of TLS and X.509 libraries (both contained in
the Mbed TLS project).

The existing maintainers will continue to develop and maintain TF-PSA-Crypto, which remains an
actively maintained part of the project.

The existing maintainers will cease their involvement in their development and maintenance
of Mbed TLS from April 2027.

Unless new maintainers have joined the project and ramped up by that time, security incident
response, security fixes, and releases will cease from April 2027.

The future maintenance arrangements for the TLS and X.509 libraries have not yet been determined. We
welcome contributions from organisations and individuals interested in helping sustain Mbed TLS,
whether through engineering resources, funding, or other forms of support. The existing
maintainers are committed to supporting new maintainers as they ramp up and take on responsibility
for the libraries.

If you or your organisation are interested in contributing to the future maintenance of Mbed TLS,
please contact mbed-tls-owner@lists.trustedfirmware.org.

We recognise the importance of these libraries to their users and the wider ecosystem, and hope
that, with community involvement, a sustainable path forward can be established.

Kind regards,
The Mbed TLS Team