> Please find the working version of version 03:
> https://github.com/mglt/drafts/commit/40e6a1e0e99064b54a328e27f0c3d498c2c7164c
> Feel free to provide comments.

Given the difficulty and time needed to deprecate cryptographic algorithms, I 
advocate to disallow DSS for
authentication. It is not widely deployed, anyway.

And for the digital signature method, why should we require SHA-1?

-- 
Johannes

_______________________________________________
IPsec mailing list
IPsec@ietf.org
https://www.ietf.org/mailman/listinfo/ipsec

Reply via email to