[Sidrops] Re: Deb Cooley's No Objection on draft-ietf-sidr ops-rpki-ccr-08: (with COMMENT)

[S Moonesamy <[e-mail]>]

Hi Job,
At 04:20 PM 22-06-2026, Job Snijders wrote:
>Perhaps so. I am not sure this is very relevant to the CCR specification
>at hand. It has always been up to software library maintainers to
>decide whether they intend to support the RPKI use case and its
>non-cryptographic use of SHA-1 in their software.
>
>It seems NIST did not deprecate SHA-1 for non-cryptographic use:
>
>         "For non-digital-signature applications, the use of SHA-1 
> is acceptable
>         for applications that do not require collision resistance."
> 
>https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-131Ar2.pdf
>
>If I'm not mistaken, NIST even indicated they'll kindly continue to make
>the SHA-1 specification available for as historic artefact.

My reading of the above is that there shouldn't be any significant 
problem.  I suggest filing this discussion under: the matter was discussed.

Regards,
S. Moonesamy