On 24 Aug 2026, at 16:01, Philip Homburg <[email protected]> wrote:
> Initially, there is nothing special about post-quantum. Those algorithms can
> become UNIVERSAL and then be added to the mix.
>
> What is special is the desire by some to prefer PQ algorithms. That would
> require extra work if those algorithms would also want to be considered
> UNIVERSAL.
I think it is very early to make architectural decisions about PQ algorithms
and DNSSEC. To me, it makes more sense to provide transparency for operators as
they try out different local validation policies and gain experience. Once we
have a better handle on what makes sense we can revisit.
This was the thinking behind the draft I mentioned a week or two ago. Perhaps
this approach could help avoid complicating multi-alg-rules with too much
handwaving about stuff we don't have much experience with.
https://datatracker.ietf.org/doc/draft-jabley-dnsop-local-signing-algorithm-policy/
Joe
_______________________________________________
DNSOP mailing list -- [email protected]
To unsubscribe send an email to [email protected]
