Re: [DNSOP] [Ext] Call for Adoption: draft-hoffman-dnssec-iana-cons

[Paul Wouters <[e-mail]>]

On Sun, 27 Dec 2020, Tim Wicinski wrote:

> How about instead of loosening the requirement, we take the top 64 values, allocate them as
> either Experimental or FCFS, and it is explicitly noted NOT REQUIRED (or NO ONE WILL IMPLEMENT
> THESE FOR YOU).
> 
> That would leave the registry with the strict requirements and allow items to get code points. 
> 
> Too simple an answer?

I think this is the best solution. There just will be nation state
crypto, and this allows those to exist. And we still keep control
of limiting the international ciphers by the IETF to the small
subset we think is good, hopefully preventing new long tails of
obsolete ciphers.

Paul