Re: [DNSOP] [Ext] Call for Adoption: draft-hardaker-dnsop-rfc8624-bis, must-not-sha1, must-not-ecc-gost

[Paul Hoffman <[e-mail]>]

On Apr 27, 2024, at 17:38, Tim Wicinski <[e-mail]> wrote:
> Please review these drafts to see if you think they are suitable for adoption
> by DNSOP, and send any comments to the list, clearly stating your view.

The WG already has many important DNSSEC-related documents that are not getting enough attention from WG participants. Each of those documents would have much more significant effects on the security of the DNS than these proposed documents. The WG should not adopt these proposed documents until the more important documents have been standardized.

In the future, there may be more relevant attacks on SHA-1 and ECC-GOST, and adopting these documents would make sense then. The advances in practical attacks on SHA-1 have been slow and somewhat predictable. The use of ECC-GOST outside of regions where it was required is nearly non-existent.

The WG's attention is valuable, and spending that attention on documents that do not noticeably affect the actual security of the DNS is not a good use of our time. I propose that Wes keep the drafts alive as personal documents until the WG's DNSSEC documents with much more impact are finished.

--Paul Hoffman