[dnsext] new recommendations for algs? was Re: RSA algorithm padding...

[Edward Lewis <[e-mail]>]

At 20:14 -0400 10/20/10, Olafur Gudmundsson wrote:

>RFC5702 is likely to be the last change to any RSA algorithm for DNSSEC,
>as ECC based algorithms are likely to become the recommended algorithms
>in the not so distant future.

If there's going to be a change in the recommended algorithms any 
time soon, the operator community will need better key management and 
signature maintenance tools.  I'm not pointing to any implementations 
in particular, but there's a growing awareness that changing 
algorithms isn't easy with what we have.

It's not the specification but the tools.  So maybe this isn't 
something that the DNSEXT solves - but if the DNSEXT group dictates 
operational parameters they have to do so realizing that tools are 
needed if the operator community is able to keep up.

-- 
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
Edward Lewis
NeuStar                    You can leave a voice message at [phone]

Ever get the feeling that someday if you google for your own life story,
you'll find that someone has already written it and it's on sale at Amazon?