(not sure why I didn't see an email yet)

I made some small changes to draft-wouters-sury-dnsop-algorithm-update

https://tools.ietf.org/rfcdiff?url2=draft-wouters-sury-dnsop-algorithm-update-02.txt

- Give a little more preference in favour of the EdDSA upcomimg
  algorithms at the expense of the ECDSA ones.
- Made ECC-GOST a little more consistent between signing and resolving.
- Updated references

The biggest issue that came up in previous discussions, is that at least
one vendor stated they will "never" remove signing support for certain
algorithms as to not break existing deployments, which would significantly
slow down deprecation of obsolete algorithms. But I don't think there is
anything that this document could change to that, other than hoping new
implementations will just skip implementing those algorithms.

Paul

_______________________________________________
DNSOP mailing list
DNSOP@ietf.org
https://www.ietf.org/mailman/listinfo/dnsop

Reply via email to