Re: New IDs

[Damien Miller <djm%mindrot.org@localhost>]

Jeffrey Hutzelman wrote:
> 
> On Sunday, May 23, 2004 15:58:10 +1000 Damien Miller <djm%mindrot.org@localhost> 
> wrote:
>>"diffie-hellman-group1-sha1" isn't rfc3526 group 14, it is rfc2904
>>group 2.
> 
> 
> RFC2904 is "AAA Authorization Framework"; it does not define any groups.
> It took me a while to figure out what the typo was; the correct reference 
> is to RFC2409 section 6.2.

Sorry, my bad. Apologies.

>>The right way to change would be to recommend the use of DH-GEX or
>>adopt Peter Gutmann's "diffie-hellman-groupN-sha1" proposal to make
>>a "diffie-hellman-group14-sha1" (though I'd prefer a shorter name,
>>while we are making changes).
> 
> I was under the impression that we had already been over this issue, and 
> that we were going to recommend implementation of DH-GEX, and that that 
> satisfied the IESG's concern.

Yes, I thought that all of these outstanding issues (DH-GEX, X.509 key
formats, etc.) were to be addressed by issuing separate drafts and that
we had arrived at a rough consensus to not delay the current drafts any
more.

-d