Re: [Dcrup] draft-ietf-dcrup-dkim-crypto-02 and registries

["John Levine" <[e-mail]>]

In article <[e-mail]> you write:
>I'd much prefer approach #2, but rather than "replace in place", the
>replacement should point to a registry with the details in the registry
>subject to expert review for future updates. The initial population of
>registry entries should designate sha1 and rsa keys <1024bits as either
>"not supported" or "deprecated" or whatever other terminology conveys the
>same message in registry-speak.

Take a look at my draft.  There already is a registry for hash
algorithms, and mine moves sha1 to historic.  

There's no registry for key sizes, and creating one would be tough.
For RSA, you can create a key with as many bits as you want.  You want
a 1775 bit key, you can use a 1775 bit key.  I'd rather keep the
advice about key size in the text since the alternative would seem to
be to list every key size from 512 to whatever and mark them
individually good or bad.

For the elliptic algorithms, there's no choice of key size so nothing
to put in a registry.

R's,
John