Re: Q2: crypto algorithm requirements for DNSSEC

[Mark.Andrews@isc.org]

> signing and verifying => making deployment more straightforward. And
> ISTR from cryptography 101 class that it's usually not a good idea to
> encrypt or sign the same stuff with different keys or algorithms.

	Encrypting things multiple times is a problem.
	Signing the same known plain text isn't.
--
Mark Andrews, Internet Software Consortium
1 Seymour St., Dundas Valley, NSW 2117, Australia
PHONE: +61 2 9871 4742                 INTERNET: Mark.Andrews@isc.org

--
to unsubscribe send a message to namedroppers-request@ops.ietf.org with
the word 'unsubscribe' in a single line as the message text body.
archive: <http://ops.ietf.org/lists/namedroppers/>