[DNSOP] Re: [Last-Call] Re: Dnsdir last call review of draft-ietf-dnsop-must-not-sha1-03

Mark Elkins <mark@posix.co.za> Fri, 04 April 2025 07:56 UTC

Return-Path: <mje@posix.co.za>
X-Original-To: dnsop@mail2.ietf.org
Delivered-To: dnsop@mail2.ietf.org
Received: from localhost (localhost [127.0.0.1]) by mail2.ietf.org (Postfix) with ESMTP id 94A5A176A566 for <dnsop@mail2.ietf.org>; Fri, 4 Apr 2025 00:56:54 -0700 (PDT)
X-Virus-Scanned: amavisd-new at ietf.org
X-Spam-Flag: NO
X-Spam-Score: -3.474
X-Spam-Level:
X-Spam-Status: No, score=-3.474 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, HTML_MESSAGE=0.001, NICE_REPLY_A=-1.374, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: mail2.ietf.org (amavisd-new); dkim=pass (1024-bit key) header.d=posix.co.za
Received: from mail2.ietf.org ([166.84.6.31]) by localhost (mail2.ietf.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id NboB-S_Dx2ZE for <dnsop@mail2.ietf.org>; Fri, 4 Apr 2025 00:56:52 -0700 (PDT)
Received: from relay.vweb.co.za (relay.vweb.co.za [IPv6:2001:42a0::71]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature ECDSA (P-256) server-digest SHA256) (No client certificate requested) by mail2.ietf.org (Postfix) with ESMTPS id 70B92176A52C for <dnsop@ietf.org>; Fri, 4 Apr 2025 00:56:51 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=posix.co.za ; s=2504; h=Content-Type:In-Reply-To:MIME-Version:Date:Message-ID:From: References:To:Subject:Reply-To:Sender:Cc:Content-Transfer-Encoding:Content-ID :Content-Description:Resent-Date:Resent-From:Resent-Sender:Resent-To: Resent-Cc:Resent-Message-ID:List-Id:List-Help:List-Unsubscribe:List-Subscribe :List-Post:List-Owner:List-Archive; bh=WtN03j+8Ga2a7TIwgqAjLfbn5+PyYhBqol3ya1Djx20=; b=b6SWxZ1KAO23uimhji0hvE3NI/ YHAGGY7NMGhITDNGHRsZNw3rUWMysrmMP9PWa0n5ssUm0sdutSOtGzTo5XUPjG8IzLaF/zO9yQsMf aE9rlpArr0JPaUcHtGgOsQ9APHhwH7/fd9CevkRKNRWqn6cN4ajGZ1OZRs+02AjeNOAo=;
Received: from [2c0f:f4c0:9123:7ba0:37b1:feb:62c7:c3df] (port=48752) by relay.vweb.co.za with esmtpsa (TLS1.3) tls TLS_AES_128_GCM_SHA256 (Exim 4.97.1) (envelope-from <mark@posix.co.za>) id 1u0buw-00000001TXI-3xpd for dnsop@ietf.org; Fri, 04 Apr 2025 09:56:46 +0200
To: dnsop@ietf.org
References: <174014439163.230.14040485401966230734@dt-datatracker-7fdd5d767c-975l9> <ybl34fahbns.fsf@wx.hardakers.net> <m1y0x1s63s.fsf@narrans.de> <yblv7rl5fee.fsf@wd.hardakers.net> <Z-9BfUMGhl-67Rsz@chardros.imrryr.org> <5e1f3e3b-5831-4d82-8c70-3062f99b92a3@nic.cz>
From: Mark Elkins <mark@posix.co.za>
Organization: Posix Systems
Message-ID: <07783fe5-5d86-dbeb-3535-25a9307a6163@posix.co.za>
Date: Fri, 04 Apr 2025 09:56:15 +0200
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:78.0) Gecko/20100101 Thunderbird/78.6.0
MIME-Version: 1.0
In-Reply-To: <5e1f3e3b-5831-4d82-8c70-3062f99b92a3@nic.cz>
Content-Type: multipart/alternative; boundary="------------E4BCD357B34AD54ED021598D"
Content-Language: en-GB
Message-ID-Hash: HDBADCBCQMFR3IQIXF6UAU72LKMS7LSZ
X-Message-ID-Hash: HDBADCBCQMFR3IQIXF6UAU72LKMS7LSZ
X-MailFrom: mje@posix.co.za
X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; emergency; loop; banned-address; member-moderation; header-match-dnsop.ietf.org-0; nonmember-moderation; administrivia; implicit-dest; max-recipients; max-size; news-moderation; no-subject; digests; suspicious-header
X-Mailman-Version: 3.3.9rc6
Precedence: list
Reply-To: mje@posix.co.za
Subject: [DNSOP] Re: [Last-Call] Re: Dnsdir last call review of draft-ietf-dnsop-must-not-sha1-03
List-Id: IETF DNSOP WG mailing list <dnsop.ietf.org>
Archived-At: <https://mailarchive.ietf.org/arch/msg/dnsop/hf9UGtoSc0stZViEnRSQh2oSglM>
List-Archive: <https://mailarchive.ietf.org/arch/browse/dnsop>
List-Help: <mailto:dnsop-request@ietf.org?subject=help>
List-Owner: <mailto:dnsop-owner@ietf.org>
List-Post: <mailto:dnsop@ietf.org>
List-Subscribe: <mailto:dnsop-join@ietf.org>
List-Unsubscribe: <mailto:dnsop-leave@ietf.org>

I'd also add a date into the text for this suggestion - which I 
completely agree with... then review it in several years from now.

On 2025/04/04 09:36, Vladimír Čunát wrote:
> On 04/04/2025 04.18, Viktor Dukhovni wrote:
>> I'd like to suggest a change in section 4:
>
> I agree.  And/or it might reference the algorithm table extended in 
> https://datatracker.ietf.org/doc/draft-ietf-dnsop-rfc8624-bis/
> (RECOMMENDED in column "use for DNSSEC signing")
>
> --Vladimir | knot-resolver.cz
>
>
> _______________________________________________
> DNSOP mailing list -- dnsop@ietf.org
> To unsubscribe send an email to dnsop-leave@ietf.org
-- 

Mark James ELKINS  -  Posix Systems - (South) Africa