[dispatch] Proposed charter for DCRUP

["John R Levine" <[e-mail]>]

The DKIM Crypto Update (DCRUP) working groupkin is chartered to modify 
DKIM to handle more modern cryptographic algorithms and key sizes. DKIM 
(RFC 6376) signatures include a tag that identifies the hash algorithm and 
signing algorithm used in the signature. The only current algorithm is 
RSA, with advice that signing keys should be between 1024 and 2048 bits. 
While 1024 bit signatures are common, longer signatures are not because 
bugs in DNS provisioning software prevent publishing longer keys as DNS 
TXT records.

DCRUP will consider two types of changes to DKIM: additional signing 
algorithms such as those based on elliptic curves, and new public key 
forms, such as putting the public key in the signature and a hash of the 
key in the DNS.  It will limit itself to existing implemented algorithms 
and key forms. Other changes to DKIM, such as new message canonicalization 
schemes, are out of scope.

The WG's output will be an update to DKIM describing the changes to DKIM 
signatures to represent new algorithms or key representations, and to DNS 
TXT records containing public key information.

Milestones:

* Adopt draft for new algorithms and key forms

* WG last call

* Ship it

Regards,
John Levine, [e-mail], Taughannock Networks, Trumansburg NY
Please consider the environment before reading this e-mail. https://jl.ly