IETF Logo Mail Archive

Re: [DNSOP] Whiskey Tango Foxtrot on key lengths...

Joe Abley <jabley@hopcount.ca> Thu, 27 March 2014 22:52 UTC

Return-Path: <jabley@hopcount.ca>
X-Original-To: dnsop@ietfa.amsl.com
Delivered-To: dnsop@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id AA1BE1A03CB for <dnsop@ietfa.amsl.com>; Thu, 27 Mar 2014 15:52:53 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.001
X-Spam-Level:
X-Spam-Status: No, score=-2.001 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, SPF_PASS=-0.001] autolearn=ham
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 6qVcfx8gPb_a for <dnsop@ietfa.amsl.com>; Thu, 27 Mar 2014 15:52:51 -0700 (PDT)
Received: from mail-ig0-x22e.google.com (mail-ig0-x22e.google.com [IPv6:2607:f8b0:4001:c05::22e]) by ietfa.amsl.com (Postfix) with ESMTP id 03EA01A024E for <dnsop@ietf.org>; Thu, 27 Mar 2014 15:52:50 -0700 (PDT)
Received: by mail-ig0-f174.google.com with SMTP id h18so126880igc.13 for <dnsop@ietf.org>; Thu, 27 Mar 2014 15:52:49 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=hopcount.ca; s=google; h=content-type:mime-version:subject:from:in-reply-to:date:cc :message-id:references:to; bh=ZFVJkb4dJ0D8YeoCtkAb8TrZzWljKOEOr3TlCDjAvak=; b=FfsTNdbZpRkdwpb5yrnJXi2tRAjM38LYroTlm0PiVQ114UVgwEdzcgci1TnOvb38XC jp5rBATedCdSNuJgzEjiT3Yj3gv3yus/w9E2BUD5crd6g3UzE3zezK/+Gf31nqpR3yu4 qf3aJR76mQ237ZQUH3runw/LnSqVdoqWVrkxY=
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:content-type:mime-version:subject:from :in-reply-to:date:cc:message-id:references:to; bh=ZFVJkb4dJ0D8YeoCtkAb8TrZzWljKOEOr3TlCDjAvak=; b=fk85f/L+QQNoPwde/GmIdmyYmbFf2U/JlwN5RJJVK/L0QSpZZo8I+3S8EEu+I9wdq+ /nSdrdkTL06WRGBnLn3EfU8g8bofYyuPhROZlBQMDiQN6B0ZVvmf18sDlopEz822qgNC yKggsqRmLg68dgWKbjNfJm18s8Gwtk7LcgiCoOzHZeXZdskxvs58JRGRkyiT0Pw3kU0W klyKGTKbp8WqM+vKSHnaTBL3FbOized3m9a0ChdCdeII68RoObzvXGQShZfL3C/6Qe5/ e4tVTisd6lpg1qbcGkXFxqcEWdsK93E+v4Xi4csFV3+Bdvgx/0NnTEB99fCJC5UCr7D7 IE6A==
X-Gm-Message-State: ALoCoQkMKvmPpLK72VW11mcjTZtah1HGDeoG8yRK8ThkgsYnRPbXJcjbKe0QhAHndS1tTq98Q6AB
X-Received: by 10.50.253.227 with SMTP id ad3mr34608262igd.23.1395960768936; Thu, 27 Mar 2014 15:52:48 -0700 (PDT)
Received: from [172.26.28.218] (65-114-90-17.dia.static.qwest.net. [65.114.90.17]) by mx.google.com with ESMTPSA id 20sm652089igi.2.2014.03.27.15.52.47 for <multiple recipients> (version=TLSv1 cipher=ECDHE-RSA-RC4-SHA bits=128/128); Thu, 27 Mar 2014 15:52:48 -0700 (PDT)
Content-Type: multipart/signed; boundary="Apple-Mail=_A2214DB7-72A6-4246-8F35-54D0C0C79747"; protocol="application/pgp-signature"; micalg="pgp-sha1"
Mime-Version: 1.0 (Mac OS X Mail 7.2 \(1874\))
From: Joe Abley <jabley@hopcount.ca>
In-Reply-To: <F2302FC1-A4A7-46EC-B907-277C6EA15BC7@hopcount.ca>
Date: Thu, 27 Mar 2014 17:52:46 -0500
Message-Id: <43E10BF9-C8E2-4D85-8290-0786D2A386E1@hopcount.ca>
References: <0EA28BE8-E872-46BA-85FD-7333A1E13172@icsi.berkeley.edu> <D9C84C71-1C87-48B3-AFAD-9F9D4AD97649@hopcount.ca> <FD66BB69-7F6E-4479-B99A-F84F9B7465A7@icsi.berkeley.edu> <F2302FC1-A4A7-46EC-B907-277C6EA15BC7@hopcount.ca>
To: Nicholas Weaver <nweaver@icsi.berkeley.edu>
X-Mailer: Apple Mail (2.1874)
Archived-At: http://mailarchive.ietf.org/arch/msg/dnsop/Al-VeNxqwB70XzE6-Arh9lkgUcs
Cc: dnsop WG <dnsop@ietf.org>
Subject: Re: [DNSOP] Whiskey Tango Foxtrot on key lengths...
X-BeenThere: dnsop@ietf.org
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: IETF DNSOP WG mailing list <dnsop.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/dnsop>, <mailto:dnsop-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/dnsop/>
List-Post: <mailto:dnsop@ietf.org>
List-Help: <mailto:dnsop-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dnsop>, <mailto:dnsop-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 27 Mar 2014 22:52:53 -0000

On 27 Mar 2014, at 17:47, Joe Abley <jabley@hopcount.ca> wrote:

> There was a plan underway to roll the KSK. I was at ICANN briefly when that started (I spoke publicly, albeit briefly about it in the dnsop meeting in Berlin). I'm no longer at ICANN and hence no longer have anything authoritative to say, but it seems plausible that the events leading up to NTIA's announcement the other week caused some delays or rescheduling of the KSK roll project. A KSK roll would be a good opportunity to change the key size.

Oh, heh, I just got off 20 hours of planes across the Pacific. It's the ZSK we're talking about. Choosing a different parameter for the ZSK doesn't necessarily involve IANA. Root zone KSK rollover not relevant.

I will go and find some coffee.


Joe

v2.23.0 | Report a Bug | By Email