Richard,

no problem.

anyway, my comments may have been too strongly worded. If we feel that it's important for router certs to use a different hash alg, then the router cert profile can define which alg to use, as an explicit, profiled deviation from the RPKI cert profile. We can also revisit the RP requirement to check the SKI in a router cert if we feel that will be necessary to enable alg agility for router cert SKI values
going forward.  This is a separate cert profile, so we have options.

Steve

_______________________________________________
sidr mailing list
[email protected]
https://www.ietf.org/mailman/listinfo/sidr

Reply via email to