> -----Original Message----- > From: Olaf M. Kolkman [mailto:[EMAIL PROTECTED] > > Miek, Rip and myself are looking at how we can merge the relevant parts. > If the WG thinks this is a good idea we'll proceed. (That is, please > shout "STOP" asap if you do not want us to put it in operational > practices. :-) ) >
I am not yelling stop yet. I would suggest dropping all language regarding specific key lengths and lifetimes. Or at least make it clear they are recommend values and can be superceeded by local policy. It would also be nice to find a good reference to back up any recommended values - especially when it comes to key length. Some people take that serious for some strange reason ;-) Scott > --Olaf > . dnsop resources:_____________________________________________________ web user interface: http://darkwing.uoregon.edu/~llynch/dnsop.html mhonarc archive: http://darkwing.uoregon.edu/~llynch/dnsop/index.html
