Hi,
I support draft-ietf-dnsop-rfc8624-bis and draft-ietf-dnsop-must-not-sha1
moving forward.
I don't know enough about GOST to have an opinion on
draft-ietf-dnsop-must-not-ecc-gost.
Best,
Peter
On 1/7/25 03:02, Tim Wicinski wrote:
All
Welcome back from holidays, those who have returned.
Discussions with the working group and authors and we feel these documents are
ready to move forward. The two deprecation documents are short.
The focus of 8624-bis is to move the canonical list of DNSSEC algorithms to
an IANA registry.
This starts a Working Group Last Call for these three documents:
"DNSSEC Cryptographic Algorithm Recommendation Update Process"
"Remove SHA-1 from active use within DNSSEC"
"Remove deprecated GOST algorithms from active use within DNSSEC"
Current versions of the draft is available here:
https://datatracker.ietf.org/doc/draft-ietf-dnsop-must-not-ecc-gost/
<https://datatracker.ietf.org/doc/draft-ietf-dnsop-must-not-ecc-gost/>
https://datatracker.ietf.org/doc/draft-ietf-dnsop-must-not-sha1/
<https://datatracker.ietf.org/doc/draft-ietf-dnsop-must-not-sha1/>
https://datatracker.ietf.org/doc/draft-ietf-dnsop-rfc8624-bis/
<https://datatracker.ietf.org/doc/draft-ietf-dnsop-rfc8624-bis/>
The Current Intended Status of this document are:
draft-ietf-dnsop-rfc8624-bis - Informational
draft-ietf-dnsop-must-not-sha1 - Proposed Standard
draft-ietf-dnsop-must-not-ecc-gost - Proposed Standard
Please review the drafts and offer relevant comments.
For WGLC, we need positive support and constructive comments; lack of objection
is not enough.
So if you think any of these drafts should be published as an RFC, please say
so.
If you feel *any* of these documents are *not* ready for publication, please
speak out with your reasons.
You are welcome to support or reject any or all of these documents
This starts a two week Working Group Last Call process, and ends on:
thanks
tim
_______________________________________________
DNSOP mailing list -- [email protected]
To unsubscribe send an email to [email protected]
--
https://desec.io/
_______________________________________________
DNSOP mailing list -- [email protected]
To unsubscribe send an email to [email protected]
