Re: DS Algorithm selection and SHA1 deprecation (Was: Re: Review of draft-ietf-dnsext-ds-sha256-01.txt)

[Andrew Sullivan <andrew@ca.afilias.info>]

On Tue, Dec 06, 2005 at 02:47:13PM -0500, Edward Lewis wrote:
> Is SHA-1 better than no understandable DS 
> records?  (That's the question an operator of a 
> resolver needs to ask themself.)

That was exactly my worry when I read the previous draft, and I think
this one has enough wiggle room in it to allow the operator to make
the right choice (yet still suggests really strongly that SHA-1 is on
the whole probably better to leave behind).

A

-- 
----
Andrew Sullivan                         204-4141 Yonge Street
Afilias Canada                        Toronto, Ontario Canada
<andrew@ca.afilias.info>                              M2P 2A8
                                        +1 416 646 3304 x4110


--
to unsubscribe send a message to namedroppers-request@ops.ietf.org with
the word 'unsubscribe' in a single line as the message text body.
archive: <http://ops.ietf.org/lists/namedroppers/>