Re: DS Algorithm selection and SHA1 deprecation

[Wes Hardaker <hardaker@tislabs.com>]

>>>>> On Wed, 07 Dec 2005 18:50:12 +1100, Mark Andrews <Mark_Andrews@isc.org> said:

>> Because zone administrators can not control the deployment support of
>> SHA-256 in deployed validators that may referencing any given zone,
>> deployments should consider publishing both SHA-1 and SHA-256 based DS
>> records.  This should be done for every DNSKEY for which a DS records
>> are being generated.  Whether to make use of both digest types and for
>> how long is a policy decision that extends beyond the scope of this
>> document.

Mark> I'm fine with this wording.

Changed.  Thanks (to both you and Andrew)

-- 
Wes Hardaker
Sparta, Inc.

--
to unsubscribe send a message to namedroppers-request@ops.ietf.org with
the word 'unsubscribe' in a single line as the message text body.
archive: <http://ops.ietf.org/lists/namedroppers/>