[dnssec-deployment] DNSSEC in Russia

bmanning at vacation.karoshi.com bmanning at vacation.karoshi.com
Thu Apr 2 17:30:36 EDT 2009


On Thu, Apr 02, 2009 at 04:19:19PM -0400, Andrew Sullivan wrote:
> On Thu, Apr 02, 2009 at 03:24:06PM -0400, Edward Lewis wrote:
> > Attempting to focus this back on ... (as the subject says) ... DNSSEC in 
> > Russia, (subsequently) leading to the use of two different algorthims 
> > signing the root zone and the impact on size ...
> 
> I have my doubts about the need to have two different algorithms in
> the root anyway.  We've already heard that for validation, the
> currently-defined suite of algorithms is probably all right.  And if
> someone claims otherwise, it seems to me to be worth asking whether
> that could be true -- is it true, for instance, that nobody in Russia
> is allowed to visit RSA-based SSL websites? 

	it is true that to -import- RSA code into Russia, one needs
	a license.
--bill
> 
> A
> 
> 
> -- 
> Andrew Sullivan
> ajs at shinkuro.com
> Shinkuro, Inc.
> 
> #############################################################
> This message is sent to you because you are subscribed to
>   the mailing list <dnssec-deployment at shinkuro.com>.
> To unsubscribe, E-mail to: <dnssec-deployment-off at shinkuro.com>
> A public archive is available here: <http://mail.shinkuro.com:8100/Lists/dnssec-deployment/>
> and older material is at
> <http://mail.shinkuro.com:8100/Lists/dnssec-deployment-archive/>



More information about the Dnssec-deployment mailing list