[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: DS Algorithm selection and SHA1 deprecation




I guess my point is that provided validators continue accepting SHA1,
authoritative servers using SHA256 are still vulnerable to attack, by
spoofing SHA1 records if SHA-1 is broken. IE the operator will be helped
not be using SHA-256, but by the validator not accepting SHA-1. I

(problem - "be" should be "by?")

Yes


Alex

--
to unsubscribe send a message to namedroppers-request@ops.ietf.org with
the word 'unsubscribe' in a single line as the message text body.
archive: <http://ops.ietf.org/lists/namedroppers/>