Re: [DNSOP] Call for Adoption: draft-hardaker-dnsop-rfc8624-bis, must-not-sha1, must-not-ecc-gost

2024-05-01 Thread Wes Hardaker
Mark Andrews writes: > If we go ahead with this these two sentences [... snip ...] That seems like a good suggestion considering the direction of the conversation. Both drafts changed accordingly, thanks for the text. -- Wes Hardaker USC/ISI ___

Re: [DNSOP] Call for Adoption: draft-hardaker-dnsop-rfc8624-bis, must-not-sha1, must-not-ecc-gost

2024-04-30 Thread Mark Andrews
If we go ahead with this these two sentences Validating resolvers MUST treat RRSIG records created from DNSKEY records using these algorithms as insecure. If no other RRSIG records of accepted cryptographic algorithms are available, the validating resolver MUST

Re: [DNSOP] Call for Adoption: draft-hardaker-dnsop-rfc8624-bis, must-not-sha1, must-not-ecc-gost

2024-04-28 Thread Paul Wouters
On Apr 27, 2024, at 20:39, Tim Wicinski wrote: > > M > > > This starts a Call for Adoption for: > draft-hardaker-dnsop-rfc8624-bis > draft-hardaker-dnsop-must-not-sha1 > draft-hardaker-dnsop-must-not-ecc-gost I support adoption for all three drafts. Willing to help with text and

[DNSOP] Call for Adoption: draft-hardaker-dnsop-rfc8624-bis, must-not-sha1, must-not-ecc-gost

2024-04-27 Thread Tim Wicinski
All These were discussed at the last IETF and the chairs felt there was consensus to request adoption. This starts a Call for Adoption for: draft-hardaker-dnsop-rfc8624-bis draft-hardaker-dnsop-must-not-sha1 draft-hardaker-dnsop-must-not-ecc-gost The drafts are available here: