Re: [dnsext] Historical root keys: The Large Router Vendor Speaks

[Phillip Hallam-Baker <[e-mail]>]

On Tue, Feb 1, 2011 at 11:49 AM, Chris Thompson <[e-mail]> wrote:

>
> Of course, the likelihood of any of this stuff being around in 136 years
> time
> is ... small.


The likelihood of us being around is small. But the system itself will
almost certainly still be around.

About 60% of the light fixtures in my house in the US suffer from a fairly
elementary design flaw that was corrected in the European standard fixture
(the Swan bayonet)  over a century ago. As a result they have a tendency to
work loose under vibration.

The design considerations of the QWERTY keyboard have been known as long.
But I am typing on one right now.

Make still has a peculiar syntax glitch that the designer thought they
should have fixed the day after the first release but could not because
there was an installed base that objected to the change.


Once this infrastructure is deployed it is going to only be possible to
add.

Fortunately any given piece of equipment need only need install the most
recent root. So unless we expect physical equipment to have to last more
than 136 years we can work fine with a system where roots are valid for 25
years and a new one is published every five years.


Given that RSA1024 is about to be deprecated, this is really only an issue
for RSA2048.

-- 
Website: http://hallambaker.com/