[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: DNSEXT WGLC: DS SHA-256

   I have reviewed and support this document.

   As for whether a validator SHOULD or MUST ignore SHA1 digests when
SHA-256 are present, perhaps the "security considerations" section could
discuss the downgrade attack on validators that accept SHA1 digests when
SHA-256 digests are present?

   Should the pair of colons following "The DNSKEY Record" in 2.3 be one
colon, or is this an IETF convention with which I as a newbie am unfamiliar?

   One very minor editing nit-pick -- the words "of course" in the security
considerations are superfluous and distracting.  This isn't a show stopper
and I'm fine if Wes doesn't want to change it.  I just feel that if we truly
believed the statement was obvious to all possible readers it wouldn't be
worth including.  Putting the "of course" only makes things harder to read.

   Best

   Stuart


> From: Ólafur Gu›mundsson <ogud@ogud.com>
> Date: Wed, 14 Dec 2005 10:01:36 -0500
> To: <namedroppers@ops.ietf.org>
> Subject: DNSEXT WGLC: DS SHA-256
> 
> 
> This message starts a Working Group Last Call on following document
> http://www.ietf.org/internet-drafts/draft-ietf-dnsext-ds-sha256-02.txt
> 
> The last call is scheduled to end on December 31'st 2005.
> 
> This document defines a new digest algorithm for the DS record.
> The reason why this is needed is the degrading trust in SHA-1
> algorithm currently used.
> 
> The document is on standards track and is scheduled to be published as
> Proposed Standard.
> 
> Please read this document and send statements of support/issues to
> the namedroppers mailing list or chairs.
> The chairs require that at least 5 people review and support this document.
> 
> Olafur & Olaf  
> 
> 
> --
> to unsubscribe send a message to namedroppers-request@ops.ietf.org with
> the word 'unsubscribe' in a single line as the message text body.
> archive: <http://ops.ietf.org/lists/namedroppers/>
> 



--
to unsubscribe send a message to namedroppers-request@ops.ietf.org with
the word 'unsubscribe' in a single line as the message text body.
archive: <http://ops.ietf.org/lists/namedroppers/>