Re: DS Algorithm selection and SHA1 deprecation

[Andrew Sullivan <andrew@ca.afilias.info>]

On Tue, Dec 06, 2005 at 09:54:06PM -0800, Wes Hardaker wrote:
>   deployments should consider publishing both SHA-1 and SHA-256 based DS
>   records.  This should be done for every DNSKEY for which a DS records

I like this wording.  It gives useful operational guidance without
setting policy.

A

-- 
----
Andrew Sullivan                         204-4141 Yonge Street
Afilias Canada                        Toronto, Ontario Canada
<andrew@ca.afilias.info>                              M2P 2A8
                                        +1 416 646 3304 x4110


--
to unsubscribe send a message to namedroppers-request@ops.ietf.org with
the word 'unsubscribe' in a single line as the message text body.
archive: <http://ops.ietf.org/lists/namedroppers/>