[DNSOP] WG: New Version Notification for draft-schmidt-brainpool-dnssec-00.txt

2014-03-21 Thread Schmidt , Jörn-Marc
Dear all, I've just submitted the draft below on using ECDSA with Brainpool Curves for DNSSEC. The rationale behind this submission is the fact that the German electronic health insurance card (Gesundheitskarte) mandates the use of DNSSEC, while the use of Brainpool curves is recommended by

Re: [DNSOP] Changes to Charter

2014-03-21 Thread Warren Kumari
On Wed, Mar 19, 2014 at 3:42 PM, Tim Wicinski tjw.i...@gmail.com wrote: Hello This is a conversation I've scheduled a few times and I did poor time mangement. After some discussion we're proposing adding two items to the DNSOP charter: --- 5. Address possible minor changes or extensions

Re: [DNSOP] on the subject of dnse

2014-03-21 Thread Phillip Hallam-Baker
This was the use case that originally drove the development of OmniBroker. If we do DNS Encryption right it is going to be very easy for end users to chose their DNS provider and very hard for the authorities to block them. Security is a balance. Going through 8.8.8.8 rather than direct means

Re: [DNSOP] Changes to Charter

2014-03-21 Thread Tim Wicinski
On 3/21/14, 7:38 AM, Warren Kumari wrote: On Wed, Mar 19, 2014 at 3:42 PM, Tim Wicinski tjw.i...@gmail.com wrote: 6. Publish documents which address DNS-related issues, by identifying and documenting the problem space around the issue. The group will then discuss these issues and decide if

Re: [DNSOP] Changes to Charter

2014-03-21 Thread Daniel Migault
I am fine with these 2 items if DNS includes DNSSEC. Maybe replacing DNS by DNS or DNSSEC clarify this. On Fri, Mar 21, 2014 at 2:16 PM, Tim Wicinski tjw.i...@gmail.com wrote: On 3/21/14, 7:38 AM, Warren Kumari wrote: On Wed, Mar 19, 2014 at 3:42 PM, Tim Wicinski tjw.i...@gmail.com wrote:

Re: [DNSOP] Changes to Charter

2014-03-21 Thread Tim Wicinski
On 3/21/14, 9:46 AM, Daniel Migault wrote: I am fine with these 2 items if DNS includes DNSSEC. Maybe replacing DNS by DNS or DNSSEC clarify this. Currently #2 of the charter states: 2. Publish documents concerning DNSSEC operational procedures. But I understand what you mean

Re: [DNSOP] on the subject of dnse

2014-03-21 Thread Paul Vixie
Phillip Hallam-Baker wrote: This was the use case that originally drove the development of OmniBroker. If we do DNS Encryption right it is going to be very easy for end users to chose their DNS provider and very hard for the authorities to block them. +1. Security is a balance. Going

Re: [DNSOP] New Version Notification for draft-schmidt-brainpool-dnssec-00.txt

2014-03-21 Thread Olafur Gudmundsson
On Mar 21, 2014, at 3:39 AM, Schmidt, Jörn-Marc joern-marc.schm...@secunet.com wrote: Dear all, I've just submitted the draft below on using ECDSA with Brainpool Curves for DNSSEC. The rationale behind this submission is the fact that the German electronic health insurance card