Re: [Last-Call] [SPAM] Artart last call review of draft-ietf-uta-rfc7525bis-09

[Cullen Jennings <fluffy@xxxxxx>]

On Jul 14, 2022, at 1:13 PM, Peter Saint-Andre <stpeter@xxxxxxxxxx> wrote:

Given the requirements for crypto agility, I think this there should be at
least one MTI algorithm that does not rely on EC. Pinning all your hopes on a
single algorithm surely is not the best security advice the IETF can provide.
If a EC did have a problem, clearly we would want something already build and
deployed that we could switch too.

The authors will discuss this and reply again.

I just wanted to see if there were any update on this one. I think it is the most serious concern raised in my review.

-- 
last-call mailing list
last-call@xxxxxxxx
https://www.ietf.org/mailman/listinfo/last-call