(WG-chair hat OFF, Document author hat ON)
Yes, it says that.
It used to have text that was consistent with the CP document. On the
28th August 2008 David Cooper ([email protected]) posted comments
to the SIDR WG that included the following: "2) Sections 3.3 and 4.5:
For consistency, the profile should either permit the use of SHA-1 or
forbid the use of 1024 bit keys. "
When I questioned David on the list on the 4th September as to what he
was requesting here and why, David responded as follows:
"So, for consistency, if SHA-1 is considered unacceptable then 1024
bit RSA keys should also be considered unacceptable. Given the
general push to move away from 1024 bit RSA keys, I would recommend
changing section 3.8 to make the minimum key size 2048 bits."
I then proposed to the WG:
"thank you for this clarification - I'll make the change to 3.8 to
specify a minimum key size of 2048 bits."
I received no further comment on this topic on the WG mailing list
until your posting.
Frankly It seems to me that this to-ing and fro-ing is less than
productive. Either you agree with David's original line of argument,
or you may chose to post cogent reasoning why, in your opinion,
David's analysis is incorrect. At this point I don't understand why we
would want to revert the section back to allowing 1024 bit keys, given
that I see no underlying supporting argumentation in your note that
clearly refutes David's reasoning.
So Roque let me ask you directly, since you have chosen to raise this
topic at this point: Why is David's analysis unacceptable to you? What
arguments can you advance in support of use of 1024-bit RSA keys in
this profile?
Geoff
On 21/07/2009, at 2:05 AM, Roque Gagliano wrote:
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Dear group,
In CP document section 6.1.5. Key sizes it is stated: "For RIR and
IANA certificates, the required RSA key size is 2048 bits. For all
other certificates, the RSA keys is 2048 or 1024 bits."
In CERT profile document section 3.8 it states: "The key size MUST
be a minimum size of 2048 bits.".
I would like to modify both documents allowing a minimum size of
1024 bits.
Regards,
r.
- -------------------------------------------------------------
Roque Gagliano
LACNIC
[email protected]
GPG Fingerprint: E929 06F4 D8CD 2AD8 9365 DB72 9E4F 964A 01E9 6CEE
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.8 (Darwin)
iEYEARECAAYFAkpklc0ACgkQnk+WSgHpbO5ziQCgqgrK6T0MBHsnGLI948hqNIft
q4gAoN9TDGq9Z7jApNo4OaMsjhHVepY/
=bYe/
-----END PGP SIGNATURE-----
_______________________________________________
sidr mailing list
[email protected]
https://www.ietf.org/mailman/listinfo/sidr
_______________________________________________
sidr mailing list
[email protected]
https://www.ietf.org/mailman/listinfo/sidr
