I guess my point is that provided validators continue accepting SHA1, authoritative servers using SHA256 are still vulnerable to attack, by spoofing SHA1 records if SHA-1 is broken. IE the operator will be helped not be using SHA-256, but by the validator not accepting SHA-1. I(problem - "be" should be "by?")
Yes Alex -- to unsubscribe send a message to namedroppers-request@ops.ietf.org with the word 'unsubscribe' in a single line as the message text body. archive: <http://ops.ietf.org/lists/namedroppers/>