Subject: Re: I-D Action:draft-ietf-dnsext-dnssec-rsasha256-05.txt
From: Jelte Jansen <[email-masked]>
To: [email-masked]
Date: Tue, 29 Jul 2008 12:58:07 +0200
List-Id: <namedroppers.ops.ietf.org>

[email-masked] wrote:
> A New Internet-Draft is available from the on-line Internet-Drafts directories.
> This draft is a work item of the DNS Extensions Working Group of the IETF.
> 
> 
> 	Title           : Use of SHA-2 algorithms with RSA in DNSKEY and RRSIG Resource Records for DNSSEC
> 	Author(s)       : J. Jansen
> 	Filename        : draft-ietf-dnsext-dnssec-rsasha256-05.txt
> 	Pages           : 9
> 	Date            : 2008-07-29
> 
> This document describes how to produce RSA/SHA-256 and RSA/SHA-512
> DNSKEY and RRSIG resource records for use in the Domain Name System
> Security Extensions (DNSSEC, RFC 4033, RFC 4034, and RFC 4035).
> 
> A URL for this Internet-Draft is:
> http://www.ietf.org/internet-drafts/draft-ietf-dnsext-dnssec-rsasha256-05.txt
> 

As discussed here on namedroppers, I removed the section about how SHA1
signatures should be ignored, and only refer to RFC4035 section 2.2 as
protection against downgrade attacks, which should be enough.

I also removed the informational reference to NIST SP 800-57 part 3,
which unfortunately has not been released in time. Instead I just made
that reference to SP 800-57 in general.

Jelte

--
to unsubscribe send a message to [email-masked] with
the word 'unsubscribe' in a single line as the message text body.
archive: <http://ops.ietf.org/lists/namedroppers/>