4 ms·
My guess is they did that to be compatible with FIPS 140-2. FIPS 140-3 allows ECDSA, but isn't widely deployed yet (among sites required to comply), so using E
by thayne 2y ago
My guess is they did that to be compatible with FIPS 140-2.
FIPS 140-3 allows ECDSA, but isn't widely deployed yet (among sites required to comply), so using ECDSA would probably cause issues for government organizations that need to use FIPS and DNSSEC.
- dc396 2y agoNah. Changing algorithms is a bigger deal than rolling the key. They want the make sure rolling the key is a non-event before taking on changing algs. Changing the algorithm is being discussed however.