-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Hi Stephen,
I was actually revisiting this issue as part of an implementation
decision. I was just with the idea that if a CA below the RIR level
wants to implement 1024 bits it should be allowed, which is in sync
with your comment.
r.
On Jul 20, 2009, at 8:42 PM, Stephen Kent wrote:
At 1:05 PM -0300 7/20/09, Roque Gagliano wrote:
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Dear group,
In CP document section 6.1.5. Key sizes it is stated: "For RIR and
IANA certificates, the required RSA key size is 2048 bits. For all
other certificates, the RSA keys is 2048 or 1024 bits."
In CERT profile document section 3.8 it states: "The key size MUST
be a minimum size of 2048 bits.".
I would like to modify both documents allowing a minimum size of
1024 bits.
Regards,
r.
The intent is to remove the key size and algorithm references from
the CERTY profile document (and others) and have the appear ONLY in
the CP.
Why do you want a single key size minimum, rather than sizes that
distinguihs between RIRS (& IANA) and other CAs?
Steve
_______________________________________________
sidr mailing list
[email protected]
https://www.ietf.org/mailman/listinfo/sidr
- -------------------------------------------------------------
Roque Gagliano
LACNIC
[email protected]
GPG Fingerprint: E929 06F4 D8CD 2AD8 9365 DB72 9E4F 964A 01E9 6CEE
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.8 (Darwin)
iEYEARECAAYFAkplEZIACgkQnk+WSgHpbO4n1wCglEd6HdjwyYLG/XZyiCCzVAWl
V3UAnjhlq5xiCINSy0kBPI+7J8jtGJlA
=mi0p
-----END PGP SIGNATURE-----
_______________________________________________
sidr mailing list
[email protected]
https://www.ietf.org/mailman/listinfo/sidr
