Evaluation: draft-ietf-secsh-dns - Using DNS to securely publish SSH key fingerprints

[IESG Secretary <iesg-secretary@ietf.org>]

Last Call to expire on: 2003-05-19

        Please return the full line with your position.

                      Yes  No-Objection  Discuss  Abstain
Harald Alvestrand    [   ]     [   ]     [   ]     [   ]
Steve Bellovin       [ X ]     [   ]     [   ]     [   ]
Randy Bush           [   ]     [   ]     [   ]     [   ]
Bill Fenner          [   ]     [   ]     [   ]     [   ]
Ned Freed            [   ]     [   ]     [   ]     [   ]
Ted Hardie           [   ]     [   ]     [   ]     [   ]
Russ Housley         [ X ]     [   ]     [   ]     [   ]
Allison Mankin       [   ]     [   ]     [   ]     [   ]
Thomas Narten        [   ]     [   ]     [   ]     [   ]
Erik Nordmark        [   ]     [   ]     [   ]     [   ]
Jon Peterson         [   ]     [   ]     [   ]     [   ]
Bert Wijnen          [   ]     [   ]     [   ]     [   ]
Alex Zinin           [   ]     [   ]     [   ]     [   ]

2/3 (9) Yes or No-Objection opinions needed to pass.

DISCUSSES AND COMMENTS:
======================



^L 
---- following is a DRAFT of message to be sent AFTER approval ---
From: The IESG <iesg-secretary@ietf.org>
To: IETF-Announce:;
Cc: "RFC Editor" <rfc-editor@isi.edu>,
    "Internet Architecture Board" <iab@iab.org>, <ietf-ssh@netbsd.org>
Subject: Protocol Action: 'Using DNS to securely publish SSH key 
         fingerprints' to a Proposed Standard 
------------------------

The IESG has approved publication of the following Internet-Draft as a
Proposed Standard:

  Using DNS to securely publish SSH key fingerprints
  <draft-ietf-secsh-dns-04.txt>

These documents are the product of the SecSH Working Group. The IESG
contact persons are Russell Housley and Steven Bellovin.

Technical Summary

      This document describes a method to verify SSH host keys using DNSSEC.
      The document defines a new DNS resource record that contains a
      standard SSH key fingerprint.

Working Group Summary

      The SecSH Working Group came to consensus on this document.

Protocol Quality

      This document was reviewed by Russell Housley for the IESG.