Re: [dispatch] Proposed charter for DCRUP

Ça marche.

Barry

On Mon, Mar 27, 2017 at 11:57 AM, John R Levine <johnl@taugh.com> wrote:
> The DKIM Crypto Update (DCRUP) working groupkin is chartered to modify DKIM
> to handle more modern cryptographic algorithms and key sizes. DKIM (RFC
> 6376) signatures include a tag that identifies the hash algorithm and
> signing algorithm used in the signature. The only current algorithm is RSA,
> with advice that signing keys should be between 1024 and 2048 bits. While
> 1024 bit signatures are common, longer signatures are not because bugs in
> DNS provisioning software prevent publishing longer keys as DNS TXT records.
>
> DCRUP will consider two types of changes to DKIM: additional signing
> algorithms such as those based on elliptic curves, and new public key forms,
> such as putting the public key in the signature and a hash of the key in the
> DNS.  It will limit itself to existing implemented algorithms and key forms.
> Other changes to DKIM, such as new message canonicalization schemes, are out
> of scope.
>
> The WG's output will be an update to DKIM describing the changes to DKIM
> signatures to represent new algorithms or key representations, and to DNS
> TXT records containing public key information.
>
> Milestones:
>
> * Adopt draft for new algorithms and key forms
>
> * WG last call
>
> * Ship it
>
> Regards,
> John Levine, johnl@taugh.com, Taughannock Networks, Trumansburg NY
> Please consider the environment before reading this e-mail. https://jl.ly
>
> _______________________________________________
> dispatch mailing list
> dispatch@ietf.org
> https://www.ietf.org/mailman/listinfo/dispatch