Re: I-D ACTION:draft-ietf-dnsext-ds-sha256-02.txt

[Wes Hardaker <hardaker@tislabs.com>]

>>>>> On Tue, 27 Dec 2005 08:25:11 -0500, Edward Lewis <Ed.Lewis@neustar.biz> said:

Edward> I cringe when I hear "security will not work" because I have never 
Edward> once heard from a seasoned security practioner "if you do things this 
Edward> way, you will be secure."

Very true.  What you tend to hear instead is "if you do things this
way, you *won't* be secure".  Or in this case "if you do things this
way (SHA-1), you're likely less secure than you would be if you use
this other thing (SHA-256).  At least right now.  Maybe."

Edward> I wouldn't be surprised if, in 5 years, I hear that SHA-256 is
Edward> beaten and now SHA-1 is more secure.

Always a possibility.

-- 
Wes Hardaker
Sparta, Inc.

--
to unsubscribe send a message to namedroppers-request@ops.ietf.org with
the word 'unsubscribe' in a single line as the message text body.
archive: <http://ops.ietf.org/lists/namedroppers/>