ACTION-310: Discourage use of RSA-SHA1 and ECDSA-SHA1 from Magnus Nyström on 2009-06-09 (public-xmlsec@w3.org from June 2009)

From: Magnus Nyström <magnus@rsa.com>
Date: Tue, 9 Jun 2009 21:41:38 +0200 (W. Europe Daylight Time)
To: XMLSec WG Public List <public-xmlsec@w3.org>
Message-ID: <Pine.WNT.4.64.0906092131210.6960@W-JNISBETTEST-1.tablus.com>

This is in response to ACTION-310 that I got today.

I have updated XMLDsig 1.1 with new text that states use of RSA-SHA1 and 
ECDSA-SHA1 is discouraged, referring to the note on the state of SHA-1 in 
the SHA-1 subsection.

(I have also replaced the reference to X9.62 with a reference to SEC 1 
v2.0, but for some reason that action has not showed up in the Open Action 
page list yet.)

-- Magnus

Received on Tuesday, 9 June 2009 19:42:32 UTC