IETF-SSH archive

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index][Old Index]

Re: WG Chair Nits & start of WG Last Call: draft-ietf-secsh-publickeyfile-06.txt



On Wed, 2005-03-23 at 16:35, Joseph Galbraith wrote:
> Bill Sommerfeld wrote:
> > ok, so this is "mission creep", but from looking through the other
> > expired drafts, it occurred to me that maybe the right thing to do with
> > the expired (and tiny) draft-ietf-secsh-fingerprint-01.txt is to fold
> > its content into this draft.
> > 
> > http://tools.ietf.org/wg/secsh/draft-ietf-secsh-fingerprint/draft-ietf-secsh-fingerprint-01.txt
> > 
> > though, given the current status of MD5 we need to defend its use in a
> > security considerations section.
> > 
> > we should note that (1) use of MD5 in this form is documents existing
> > practice, (2) the MD5 property which we rely on is 2nd-preimage
> > resistance, not collision-resistance.
> > 
> > thoughts?
> 
> Done.

Excellent.

> Should I hold off a while before assaulting the draft editor with
> another version or repost now?

I would hold off for a day or two to see who else has comments and then
send it in.

						- Bill





Home | Main Index | Thread Index | Old Index