Warren and I have just published long promised documents. The first updates RFC8624 to move all recommendations to the DNSSEC registries, similar to how TLS does. The next two request updates to said registries for deprecating SHA-1 and ECC-GOST, which we believe the community wishes to happen.
- draft-hardaker-dnsop-rfc8624-bis - draft-hardaker-dnsop-must-not-sha1 - draft-hardaker-dnsop-must-not-ecc-gost (These are early drafts so there are certainly things to discuss about them. We look forward to those discussions.) -- Wes Hardaker USC/ISI _______________________________________________ DNSOP mailing list DNSOP@ietf.org https://www.ietf.org/mailman/listinfo/dnsop
