[DNSOP] Secdir telechat review of draft-ietf-dnsop-must-not-sha1-06

2025-04-13 Thread Yoav Nir via Datatracker
Document: draft-ietf-dnsop-must-not-sha1 Title: Deprecating the use of SHA-1 in DNSSEC signature algorithms Reviewer: Yoav Nir Review result: Ready The document is fine as it is. I will say that the Security Considerations section is a bit strange: This document deprecates the use of RSASHA1 a

[DNSOP] Secdir last call review of draft-ietf-dnsop-must-not-sha1-03

2025-02-27 Thread Yoav Nir via Datatracker
Reviewer: Yoav Nir Review result: Has Issues Hi. I agree with what the draft says, and also wth Barry Leiba's comments about terminology. Still, there are two things in the draft text that stood out as strange: In the introduction, we have "DNSSEC [RFC9364] originally made extensive use of SHA-1