Re: I-D Action:draft-ietf-dnsext-dnssec-rsasha256-05.txt

[Jelte Jansen <[e-mail]>]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

[e-mail] wrote:
> A New Internet-Draft is available from the on-line Internet-Drafts directories.
> This draft is a work item of the DNS Extensions Working Group of the IETF.
> 
> 
> 	Title           : Use of SHA-2 algorithms with RSA in DNSKEY and RRSIG Resource Records for DNSSEC
> 	Author(s)       : J. Jansen
> 	Filename        : draft-ietf-dnsext-dnssec-rsasha256-05.txt
> 	Pages           : 9
> 	Date            : 2008-07-29
> 
> This document describes how to produce RSA/SHA-256 and RSA/SHA-512
> DNSKEY and RRSIG resource records for use in the Domain Name System
> Security Extensions (DNSSEC, RFC 4033, RFC 4034, and RFC 4035).
> 
> A URL for this Internet-Draft is:
> http://www.ietf.org/internet-drafts/draft-ietf-dnsext-dnssec-rsasha256-05.txt
> 

As discussed here on namedroppers, I removed the section about how SHA1
signatures should be ignored, and only refer to RFC4035 section 2.2 as
protection against downgrade attacks, which should be enough.

I also removed the informational reference to NIST SP 800-57 part 3,
which unfortunately has not been released in time. Instead I just made
that reference to SP 800-57 in general.

Jelte
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.6 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQFIjve/4nZCKsdOncURAtpRAJ9iZXS3CPzlwRs9XVWJPqN0faKuXQCghBrU
P+fl+MyP0ls++8/fqVO1gLk=
=2Agf
-----END PGP SIGNATURE-----

--
to unsubscribe send a message to [e-mail] with
the word 'unsubscribe' in a single line as the message text body.
archive: <http://ops.ietf.org/lists/namedroppers/>