[email protected] said:
> We have to be careful here. I agree that at least some  cipher suites should
> be specified as a minimal subset in the draft but we also need flexibility
> as new ciphers come out and older ones are found to be vunerable. Otherwise
> we will need to create new RFC's to update the RFC for either of these
> scenarios. I'm sure that there are other implementations that have run into
> this problem and we should see how they handle it. 

Is there any group in the IETF keeping track of which cyphers are good/weak?

It would be nice if there were something like the assigned numbers role, but 
this is more complicated that just assigning and keeping track of what has 
been assigned.

-- 
These are my opinions.  I hate spam.



_______________________________________________
TICTOC mailing list
[email protected]
https://www.ietf.org/mailman/listinfo/tictoc

Reply via email to