Mbed TLS maintainers will walk away in April 2027, leaving its TLS and X.509 libraries without security fixes

Future Maintenance of Mbed TLS

The Mbed TLS team announced that its current maintainers will stop developing and maintaining the TLS and X.509 libraries from April 2027, and will focus instead on TF-PSA-Crypto. Unless new maintainers step up by then, security incident response, fixes, and releases will stop entirely. The future of the libraries is undecided, and the team is asking organizations and individuals for engineering resources, funding, or other support. Godot Engine, which just migrated to version 4, called the news disappointing.

Knowing all that work was wasted, and we should have moved to a different library feels quite bad.

More from this day

2026-11-05