> Please find the working version of version 03: > https://github.com/mglt/drafts/commit/40e6a1e0e99064b54a328e27f0c3d498c2c7164c > Feel free to provide comments.
Given the difficulty and time needed to deprecate cryptographic algorithms, I advocate to disallow DSS for authentication. It is not widely deployed, anyway. And for the digital signature method, why should we require SHA-1? -- Johannes _______________________________________________ IPsec mailing list IPsec@ietf.org https://www.ietf.org/mailman/listinfo/ipsec