On Apr 27, 2024, at 17:38, Tim Wicinski <tjw.i...@gmail.com> wrote:
> Please review these drafts to see if you think they are suitable for adoption
> by DNSOP, and send any comments to the list, clearly stating your view.

The WG already has many important DNSSEC-related documents that are not getting 
enough attention from WG participants. Each of those documents would have much 
more significant effects on the security of the DNS than these proposed 
documents. The WG should not adopt these proposed documents until the more 
important documents have been standardized.

In the future, there may be more relevant attacks on SHA-1 and ECC-GOST, and 
adopting these documents would make sense then. The advances in practical 
attacks on SHA-1 have been slow and somewhat predictable. The use of ECC-GOST 
outside of regions where it was required is nearly non-existent.

The WG's attention is valuable, and spending that attention on documents that 
do not noticeably affect the actual security of the DNS is not a good use of 
our time. I propose that Wes keep the drafts alive as personal documents until 
the WG's DNSSEC documents with much more impact are finished.

--Paul Hoffman

_______________________________________________
DNSOP mailing list
DNSOP@ietf.org
https://www.ietf.org/mailman/listinfo/dnsop

Reply via email to