Re: [openpgp] Deprecate legacy hash algorithms

Werner Koch <wk@gnupg.org> Tue, 21 March 2017 07:23 UTC

Return-Path: <wk@gnupg.org>
X-Original-To: openpgp@ietfa.amsl.com
Delivered-To: openpgp@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 57CE912957A for <openpgp@ietfa.amsl.com>; Tue, 21 Mar 2017 00:23:08 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -6.899
X-Spam-Level:
X-Spam-Status: No, score=-6.899 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_HI=-5, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id nuizx07Ee0-u for <openpgp@ietfa.amsl.com>; Tue, 21 Mar 2017 00:23:07 -0700 (PDT)
Received: from kerckhoffs.g10code.com (kerckhoffs.g10code.com [IPv6:2001:aa8:fff1:100::22]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id F1A6A129572 for <openpgp@ietf.org>; Tue, 21 Mar 2017 00:23:06 -0700 (PDT)
Received: from uucp by kerckhoffs.g10code.com with local-rmail (Exim 4.84_2 #1 (Debian)) id 1cqE8H-0002nC-FO for <openpgp@ietf.org>; Tue, 21 Mar 2017 08:23:05 +0100
Received: from wk by wheatstone.g10code.de with local (Exim 4.84 #3 (Debian)) id 1cqE2D-0001sS-3a; Tue, 21 Mar 2017 08:16:49 +0100
From: Werner Koch <wk@gnupg.org>
To: Jon Callas <joncallas@icloud.com>
Cc: openpgp@ietf.org
References: <87tw6ss2g5.fsf@wheatstone.g10code.de> <4F39357D-8D8A-40BB-BFC8-B99ED0A4D801@icloud.com>
Organisation: The GnuPG Project
X-message-flag: Mails containing HTML will not be read! Please send only plain text.
OpenPGP: url=https://k.gnupg.net/80615870F5BAD690333686D0F2AD85AC1E42B367
Mail-Followup-To: Jon Callas <joncallas@icloud.com>, openpgp@ietf.org
Date: Tue, 21 Mar 2017 08:16:48 +0100
In-Reply-To: <4F39357D-8D8A-40BB-BFC8-B99ED0A4D801@icloud.com> (Jon Callas's message of "Fri, 17 Mar 2017 11:09:57 -0700")
Message-ID: <87var3m74v.fsf@wheatstone.g10code.de>
User-Agent: Gnus/5.13 (Gnus v5.13)
MIME-Version: 1.0
Content-Type: multipart/signed; boundary="=counter_terrorism_doctrine_Maple_BLU-97_A/B_Cocaine_9705_Samford_Roa"; micalg="pgp-sha256"; protocol="application/pgp-signature"
Archived-At: <https://mailarchive.ietf.org/arch/msg/openpgp/79-45qrraD3jcoKYREAIF-MIems>
Subject: Re: [openpgp] Deprecate legacy hash algorithms
X-BeenThere: openpgp@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: "Ongoing discussion of OpenPGP issues." <openpgp.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/openpgp>, <mailto:openpgp-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/openpgp/>
List-Post: <mailto:openpgp@ietf.org>
List-Help: <mailto:openpgp-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/openpgp>, <mailto:openpgp-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 21 Mar 2017 07:23:08 -0000

On Fri, 17 Mar 2017 19:09, joncallas@icloud.com said:

> I prefer deprecation (SHOULD NOT) over banning (MUST NOT) because a
> ban leads either to people being silly about a lack of backwards
> compatibility or they just defiantly ignore the ban.

Good point.  I am also fine with SHOULD NOT.


Salam-Shalom,

   Werner

-- 
Die Gedanken sind frei.  Ausnahmen regelt ein Bundesgesetz.