I would strongly suggest that we make SHA-256 the MUST on the signer
side for interop and SHA-1 a MAY.
Agreed, with a note that if the IESG has a new and improved hash they like
better than SHA-256, we can plug that in instead.
John Levine, johnl(_at_)iecc(_dot_)com, Primary Perpetrator of "The Internet
Information Superhighwayman wanna-be, http://www.johnlevine.com, Mayor
"I shook hands with Senators Dole and Inouye," said Tom, disarmingly.
NOTE WELL: This list operates according to