On Wed, Jan 08, 2025 at 7:07 AM, Stefan Ubbink <
Stefan.Ubbink=40sidn...@dmarc.ietf.org> wrote:

> On Mon, 6 Jan 2025 21:02:52 -0500
> Tim Wicinski <tjw.i...@gmail.com> wrote:
>
> All
>
> Hello,
>
> Welcome back from holidays, those who have returned. Discussions with the
> working group and authors and we feel these documents are ready to move
> forward. The two deprecation documents are short. The focus of 8624-bis is
> to move the canonical list of DNSSEC algorithms to an IANA registry.
>
> This starts a Working Group Last Call for these three documents:
>
> "DNSSEC Cryptographic Algorithm Recommendation Update Process"
>
> I have not read this, so I won't comment on it.
>
> "Remove SHA-1 from active use within DNSSEC"
>
> I wonder why the DNSSEC reference in the "1. Introduction" is mentioning
> multiple RFC's, while it is only referenced by RFC9364 in the not-ecc-gost.
>


Probably because we started writing the SHA-1 one first, and forgot to
update this one :-)
Thank you, fixed in editor / Github copy.


> I support the publication of this draft.
>
> "Remove deprecated GOST algorithms from active use within DNSSEC"
>
> A small nit on section 2, the last word insecure is written with a capital
> I, instead of a small letter as in the first paragraph.
>

Hmmmm. I think that we had had it as "Insecure" because that is term for
the state when the validation fails, but it is confusing, so I updated it
to be "insecure" in the Github / editor copy.

Thank you!


> I support the publication of this draft.
>


Thank you!
W


> --
> Stefan Ubbink
> DNS & Systems Engineer
> Present: Mon, Tue, Wed, Fri
> SIDN | Meander 501 | 6825 MD | ARNHEM | The Netherlands T +31 (0)26 352 55
> 00
> https://www.sidn.nl
>
> _______________________________________________
> DNSOP mailing list -- dnsop@ietf.org
> To unsubscribe send an email to dnsop-le...@ietf.org
>
>
_______________________________________________
DNSOP mailing list -- dnsop@ietf.org
To unsubscribe send an email to dnsop-le...@ietf.org

Reply via email to