ietf-openpgp
[Top] [All Lists]

Re: [Sam Hartman] Openpgp comments

2006-09-19 02:17:42

On Tue, 19 Sep 2006 02:39, Jon Callas said:

So -- my question for the WG: Is this alright with you? I want to get
2440bis done. I think that answers the perception that SHA-1 isn't
good enough, without causing us to do a lot of work. If y'all think

I concur with your reasoning to stay with SHA-1 and to allow (MAY) for
a v2 MDC packet using SHA-256.  If you have some text to explain for
what we use the MDC it would be good to see it in the security notes.


Shalom-Salam,

   Werner