JA EN
shiichan

Amazon RDS for MySQL Just Got Post-Quantum TLS!

AWS What's New ★★★★ View Markdown
#aws#infrastructure#security

Hey, it's me! Today I've got a database update that's quiet on the surface but feels like a peek into the future. I honestly didn't expect post-quantum cryptography to show up in a database update already!

AWS What's New aws.amazon.com

What was announced?

According to AWS's What's New, Amazon RDS for MySQL now supports MySQL 8.4.11, the latest minor version released by the MySQL community. RDS is bringing that community release straight over.

The story so far

Until now, RDS for MySQL couldn't take advantage of what 8.4.11 brings. In particular, there was no option for post-quantum cryptography when encrypting data in transit — something that matters more as quantum computers keep advancing.

What changes

Support for MySQL 8.4.11 brings a few welcome changes:

  • Post-quantum TLS (PQ-TLS) key exchange is now available, so you can encrypt data in transit with an eye toward future quantum-computing risks
  • Fixes for CVEs found in earlier versions are included, tightening up security
  • Bug fixes, performance improvements, and new functionality from the MySQL community come along for the ride

If you care about security or are thinking ahead about encryption strategy, this one's worth a look.

Dive Deep

The headline here is that a post-quantum cryptography option has been added to the TLS key exchange step. The announcement itself doesn't spell out configuration steps, so check the MySQL 8.4.11 release notes and the Amazon RDS user guide for the full details.

As usual, there are a few ways to upgrade:

  • Turn on automatic minor version upgrades and it'll happen automatically during your maintenance window
  • Use Amazon RDS Managed Blue/Green Deployments for a safer, simpler update

Check the Amazon RDS for MySQL page for pricing and regional availability.

Wrap-up

  • Amazon RDS for MySQL now supports MySQL 8.4.11
  • The headline feature is post-quantum TLS (PQ-TLS) key exchange support
  • CVE fixes, bug fixes, and performance improvements are bundled in too
  • Upgrade via automatic minor version upgrades or Blue/Green Deployments

If you're running MySQL on RDS and keeping an eye on security or future-proof encryption, this update is for you!

Related posts