The IESG has received a request from the Domain Name System Operations WG (dnsop) to consider the following document: - 'DNSSEC Cryptographic Algorithm Recommendation Update Process' <draft-ietf-dnsop-rfc8624-bis-06.txt> as Informational RFC
This document is part of a cluster of 3 DNSOP WG documents and it is recommended to start with draft-ietf-dnsop-rfc8624-bis before any of the others (draft-ietf-dnsop-must-not-sha1 and draft-ietf-dnsop-must-not-ecc-gost). Abstract The DNSSEC protocol makes use of various cryptographic algorithms to provide authentication of DNS data and proof of non-existence. To ensure interoperability between DNS resolvers and DNS authoritative servers, it is necessary to specify both a set of algorithm implementation requirements and usage guidelines to ensure that there is at least one algorithm that all implementations support. This document updates RFC8624 by moving the canonical source of algorithm implementation requirements and usage guidance for DNSSEC from RFC8624 to an IANA registry. This is done both to allow the list to be more easily updated, and to allow the list to be more easily referenced. Future extensions to this registry can be made under new, incremental update RFCs. The document does not change the status (MUST, MAY, RECOMMENDED, etc) of any of the algorithms listed in RFC8624; that is the work of future documents. The file can be obtained via https://datatracker.ietf.org/doc/draft-ietf-dnsop-rfc8624-bis/ No IPR declarations have been submitted directly on this I-D. _______________________________________________ DNSOP mailing list -- [email protected] To unsubscribe send an email to [email protected]
