all the problems you call out are implementation bugs, not specification bugs.  If people can&#x27;t implement it right, it&#x27;s not the spec&#x27;s fault - though we should definitely strive for &quot;easy to implement&quot;.  &quot;Freezing TLS&quot; doesn&#x27;t really make sense either - you&#x27;ll probably be able to use TLS 1.1&#x2F;1.2 for years to come, and it takes a LONG time for a new version of the protocol to roll out and gain support.  If a TLS implementation wanted to focus on bugs and quality instead of implementing new features, they totally could.