IETF Logo Mail Archive

Re: [DNSOP] New Version of draft-ietf-dnsop-algorithm-update-00: Algorithm Implementation Requirements and Usage Guidance for DNSSEC

Paul Wouters <paul@nohats.ca> Fri, 23 March 2018 19:41 UTC

Return-Path: <paul@nohats.ca>
X-Original-To: dnsop@ietfa.amsl.com
Delivered-To: dnsop@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 331C412DA27 for <dnsop@ietfa.amsl.com>; Fri, 23 Mar 2018 12:41:41 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.009
X-Spam-Level:
X-Spam-Status: No, score=-2.009 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, T_RP_MATCHES_RCVD=-0.01, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=nohats.ca
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id weQJ9jJPVsE0 for <dnsop@ietfa.amsl.com>; Fri, 23 Mar 2018 12:41:39 -0700 (PDT)
Received: from mx.nohats.ca (mx.nohats.ca [193.110.157.68]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 6EEA8126BF7 for <dnsop@ietf.org>; Fri, 23 Mar 2018 12:41:39 -0700 (PDT)
Received: from localhost (localhost [IPv6:::1]) by mx.nohats.ca (Postfix) with ESMTP id 407DSH64bwzF9y for <dnsop@ietf.org>; Fri, 23 Mar 2018 20:41:35 +0100 (CET)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=nohats.ca; s=default; t=1521834095; bh=9pvUFV7u+MFhF3gYREt+XEMn+zTY1lBkQX65UFApzvk=; h=From:Date:Subject:References:In-Reply-To:To; b=Io0ZDRw7uElApUFuTdMjgL9/stv+55OhxXAQULlEbEtP4GFgatXjSBzzocw93Ie5k uA21a+uFWhvX015W042pMG0zw0Kl8pOdJ8obdqo/QvxjOoDsM6fCvu42PFDxk1v7aP LfhhsvX+37l6NhfKorUU19CtucUKs/0ceRSCPpFA=
X-Virus-Scanned: amavisd-new at mx.nohats.ca
Received: from mx.nohats.ca ([IPv6:::1]) by localhost (mx.nohats.ca [IPv6:::1]) (amavisd-new, port 10024) with ESMTP id mIoR7-RMUyqc for <dnsop@ietf.org>; Fri, 23 Mar 2018 20:41:34 +0100 (CET)
Received: from bofh.nohats.ca (bofh.nohats.ca [76.10.157.69]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by mx.nohats.ca (Postfix) with ESMTPS for <dnsop@ietf.org>; Fri, 23 Mar 2018 20:41:33 +0100 (CET)
Received: from [192.168.0.63] (97e334e7.skybroadband.com [151.227.52.231]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by bofh.nohats.ca (Postfix) with ESMTPSA id 087CAA7E07 for <dnsop@ietf.org>; Fri, 23 Mar 2018 15:41:32 -0400 (EDT)
DKIM-Filter: OpenDKIM Filter v2.11.0 bofh.nohats.ca 087CAA7E07
From: Paul Wouters <paul@nohats.ca>
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: quoted-printable
Mime-Version: 1.0 (1.0)
Date: Fri, 23 Mar 2018 19:41:30 +0000
Message-Id: <777076C9-246B-49A5-85D7-D42C316D9221@nohats.ca>
References: <EBE54422-0A97-4B33-BD55-01CACF1F272A@isc.org> <alpine.LRH.2.21.1803221314140.11686@bofh.nohats.ca> <20180323155802.GI3322@mournblade.imrryr.org>
In-Reply-To: <20180323155802.GI3322@mournblade.imrryr.org>
To: dnsop@ietf.org
X-Mailer: iPhone Mail (15D100)
Archived-At: <https://mailarchive.ietf.org/arch/msg/dnsop/tkP0DZzU1esyVsX7vPGg2n9K6Mc>
Subject: Re: [DNSOP] New Version of draft-ietf-dnsop-algorithm-update-00: Algorithm Implementation Requirements and Usage Guidance for DNSSEC
X-BeenThere: dnsop@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: IETF DNSOP WG mailing list <dnsop.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/dnsop>, <mailto:dnsop-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/dnsop/>
List-Post: <mailto:dnsop@ietf.org>
List-Help: <mailto:dnsop-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dnsop>, <mailto:dnsop-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 23 Mar 2018 19:41:41 -0000


> On Mar 23, 2018, at 15:58, Viktor Dukhovni <ietf-dane@dukhovni.org> wrote:
> 
> 
> I think it is, unfortunately, much too early for such a move.  For
> example, on Unix systems the requisite OpenSSL 1.1.x libraries that
> provide the Edwards EC algorithms, are not yet out of beta!  It
> will be some years before Ed25519 and Ed448 can be expected to be
> widely supported by resolvers.  Therefore, I would still strongly
> recommend ECDSA, which is widely supported.

That’s fair. I take back my suggestion.

Paul

v2.23.0 | Report a Bug | By Email