[DNSOP] RFC8624-bis proposal update and two more documents

Wes Hardaker <wjhns1@hardakers.net> Wed, 28 February 2024 00:45 UTC

Return-Path: <wjhns1@hardakers.net>
X-Original-To: dnsop@ietfa.amsl.com
Delivered-To: dnsop@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 42555C151062 for <dnsop@ietfa.amsl.com>; Tue, 27 Feb 2024 16:45:47 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.106
X-Spam-Level:
X-Spam-Status: No, score=-2.106 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, RCVD_IN_DNSWL_BLOCKED=0.001, RCVD_IN_ZEN_BLOCKED_OPENDNS=0.001, SPF_PASS=-0.001, T_SCC_BODY_TEXT_LINE=-0.01, URIBL_BLOCKED=0.001, URIBL_DBL_BLOCKED_OPENDNS=0.001, URIBL_ZEN_BLOCKED_OPENDNS=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=hardakers.net
Received: from mail.ietf.org ([50.223.129.194]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id sti-RXbcxmmt for <dnsop@ietfa.amsl.com>; Tue, 27 Feb 2024 16:45:42 -0800 (PST)
Received: from mail.hardakers.net (mail.hardakers.net [107.220.113.177]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (2048 bits) server-digest SHA256) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 7DB6AC14CF12 for <dnsop@ietf.org>; Tue, 27 Feb 2024 16:45:42 -0800 (PST)
Received: from localhost (unknown [10.0.0.9]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (2048 bits) server-digest SHA256) (No client certificate requested) by mail.hardakers.net (Postfix) with ESMTPSA id F1D52296CC; Tue, 27 Feb 2024 16:45:41 -0800 (PST)
DKIM-Filter: OpenDKIM Filter v2.11.0 mail.hardakers.net F1D52296CC
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=hardakers.net; s=default; t=1709081142; bh=H/60Z1wGKjGODY0kXodd6lsh3iGGCGocztK6uLNTepw=; h=From:To:Cc:Subject:Date:From; b=aKQj46TX6U/Hpm53GUGeedcTPUX946e+3LiutnLnEDsLXGQcFCLzbMJq+/ShYO6jK LNrAhqS4T93qwbG/XvBUlydlWJvIwk33V2ysyJvjH61XgWB1i0UrUTjdutWprIlp3D 1p6EfJq4ymmXxlqUSqf8Rc2xeBRvIshXnpG/eBBc=
From: Wes Hardaker <wjhns1@hardakers.net>
To: dnsop@ietf.org
Date: Tue, 27 Feb 2024 16:45:41 -0800
Message-ID: <yblv869e7re.fsf@wd.hardakers.net>
User-Agent: Gnus/5.13 (Gnus v5.13)
MIME-Version: 1.0
Content-Type: text/plain
Archived-At: <https://mailarchive.ietf.org/arch/msg/dnsop/JsPhWtNgzBgV59G3xiDgswJke-U>
Subject: [DNSOP] RFC8624-bis proposal update and two more documents
X-BeenThere: dnsop@ietf.org
X-Mailman-Version: 2.1.39
Precedence: list
List-Id: IETF DNSOP WG mailing list <dnsop.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/dnsop>, <mailto:dnsop-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/dnsop/>
List-Post: <mailto:dnsop@ietf.org>
List-Help: <mailto:dnsop-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dnsop>, <mailto:dnsop-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 28 Feb 2024 00:45:47 -0000

Warren and I have just published long promised documents.  The first
updates RFC8624 to move all recommendations to the DNSSEC registries,
similar to how TLS does.  The next two request updates to said
registries for deprecating SHA-1 and ECC-GOST, which we believe the
community wishes to happen.

- draft-hardaker-dnsop-rfc8624-bis
- draft-hardaker-dnsop-must-not-sha1
- draft-hardaker-dnsop-must-not-ecc-gost

(These are early drafts so there are certainly things to discuss about
them.  We look forward to those discussions.)

-- 
Wes Hardaker
USC/ISI