IETF Logo Mail Archive

Re: [Dcrup] draft-ietf-dcrup-dkim-usage and document shepherds

"Murray S. Kucherawy" <superuser@gmail.com> Tue, 13 June 2017 13:13 UTC

Return-Path: <superuser@gmail.com>
X-Original-To: dcrup@ietfa.amsl.com
Delivered-To: dcrup@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 72B9412EAA4 for <dcrup@ietfa.amsl.com>; Tue, 13 Jun 2017 06:13:27 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.698
X-Spam-Level:
X-Spam-Status: No, score=-2.698 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 9L0DYkkZDC1h for <dcrup@ietfa.amsl.com>; Tue, 13 Jun 2017 06:13:25 -0700 (PDT)
Received: from mail-vk0-x230.google.com (mail-vk0-x230.google.com [IPv6:2607:f8b0:400c:c05::230]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 4CAE1129503 for <dcrup@ietf.org>; Tue, 13 Jun 2017 06:13:25 -0700 (PDT)
Received: by mail-vk0-x230.google.com with SMTP id y70so25230315vky.3 for <dcrup@ietf.org>; Tue, 13 Jun 2017 06:13:25 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:in-reply-to:references:from:date:message-id:subject:to :cc; bh=SwoY+UVYKaOuDqHlXmT7JGflg5rWkXTxQskaErY/4n4=; b=rbVPjFbwnM1yLcDlNqMptjnXWia6AvZSquH6BAA1w1wfKjQTKlKI/J0+w58hJSAjXs tVzp2X3QCtYWAYN0x+iHk0rFFM2e3+DDFlWtAitHYUiIT82Pfdb0nPPXj0Tn5c77hXJ0 dH+gorfVgNLHFvtf6qgp9sBH67qywD57K2622QShxoQzGoFgTc8EYRsTfHOkxtTQ3lyW 4UjPNRmLUieRVmo1sNJHEfKrkhyArpFJoe3esv3bVcFeH5RgQfXF61mfHKmWIP1qJ945 ZcxGm71CmmlJSLf4lf9CTy6gxEBw8XeUCJz3OXRSbyaMRJxD0qZ+G6bJhcBclfCacXUI pLNw==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:in-reply-to:references:from:date :message-id:subject:to:cc; bh=SwoY+UVYKaOuDqHlXmT7JGflg5rWkXTxQskaErY/4n4=; b=ana9z+cpEVB15jHdL8japORhEmerTI6oEYbF5aFI7agRLt78Ye/OR6CRa5CF/GwCwl rAN25LTtei9DbmGRIgy8egegdJ93FkYlZ8kwilOtW5vvmdQ6ZiCNArvCqYw3R0ys0A8p QO01MYqD8u3O2lFC29dB9YaA5k4JIO63SGz+w7T2Jgtqcfxoa6BODLJgBMNcQqx6xAIC CDSCWTFp7h4ICbv8eyDTKGsdGiGsqV1xS07y4OQ5NwYo/9Vtd9C5S738MyWY0DTddhvB DLwAmjJQr6Mrtb3sWYJT8U3p167wB9cYRQ41zpDlhGQthKJC96HytbEkNu6He38NKxGF pHuw==
X-Gm-Message-State: AODbwcD7P3oBvlH1CiWPhSyY/6ouzrjgYCYn6j1lV+4/Di6DpQjeV4cs iSe6gwh79oDUNoc6QWhEAV1QEr7/HGE68sM=
X-Received: by 10.31.173.134 with SMTP id w128mr19344273vke.125.1497359604432; Tue, 13 Jun 2017 06:13:24 -0700 (PDT)
MIME-Version: 1.0
Received: by 10.103.138.3 with HTTP; Tue, 13 Jun 2017 06:13:23 -0700 (PDT)
In-Reply-To: <CABuGu1qkpiG6ojo2Te6qcp3ckBeSvHCdUvNMV2N63a8s2e9_Cg@mail.gmail.com>
References: <20170610002538.10992.qmail@ary.lan> <2034638.szbv6KSWyz@kitterma-e6430> <CAL0qLwY4yFGbBXHw=YXgLgok1uzWm4s2TQ2GSBak_cDn4KsOBA@mail.gmail.com> <4379310.8G0EpGEsGj@kitterma-e6430> <CAOZAAfNxYG4XZusXvkXneDpyjPgdWSB_vk1maCS=Wobrj2ybzg@mail.gmail.com> <CABuGu1qkpiG6ojo2Te6qcp3ckBeSvHCdUvNMV2N63a8s2e9_Cg@mail.gmail.com>
From: "Murray S. Kucherawy" <superuser@gmail.com>
Date: Tue, 13 Jun 2017 06:13:23 -0700
Message-ID: <CAL0qLwaUFYzRpi_JxnYna1d1-ZgOBfEw+d-xv72PHJhDwNGhBg@mail.gmail.com>
To: Kurt Andersen <kurta@drkurt.com>
Cc: Seth Blank <seth@valimail.com>, dcrup@ietf.org
Content-Type: multipart/alternative; boundary="001a1143f0ce52c61d0551d7333e"
Archived-At: <https://mailarchive.ietf.org/arch/msg/dcrup/vGO2v07ngx7VxzGlR7yUUgeBwVA>
Subject: Re: [Dcrup] draft-ietf-dcrup-dkim-usage and document shepherds
X-BeenThere: dcrup@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: DKIM Crypto Update <dcrup.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/dcrup>, <mailto:dcrup-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/dcrup/>
List-Post: <mailto:dcrup@ietf.org>
List-Help: <mailto:dcrup-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dcrup>, <mailto:dcrup-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 13 Jun 2017 13:13:27 -0000

On Tue, Jun 13, 2017 at 2:53 AM, Kurt Andersen <kurta@drkurt.com> wrote:

> I'd much prefer approach #2, but rather than "replace in place", the
> replacement should point to a registry with the details in the registry
> subject to expert review for future updates. The initial population of
> registry entries should designate sha1 and rsa keys <1024bits as either
> "not supported" or "deprecated" or whatever other terminology conveys the
> same message in registry-speak.
>

We have such a registry, here:

https://www.iana.org/assignments/dkim-parameters/dkim-parameters.xhtml

Look for "DKIM Hash Algorithms".  We just need to mark "sha1" as
"deprecated" or some such.

This doesn't cover key sizes, but that was discussed elsewhere.  I still
don't think that belongs in a registry as a bare parameter.

-MSK

v2.28.0 | Report a Bug | By Email | System Status