> You can in some sense sum up the cryptographic competence of DNSSEC by observing, as you have, that many of its largest deployers still use RSA-1024. If you h

> You can in some sense sum up the cryptographic competence of DNSSEC by observing, as you have, that many of its largest deployers still use RSA-1024. If you have any actual interest in cryptography ... you could also help improve the DANE protocol. The DANE Working Group within the IETF is open to all. The mailing list is at: https://www.ietf.org/mailman/listinfo/dane https://www.ietf.org/mailman/listinfo/dane FYI, the working group will be meeting Tuesday afternoon (July 22) here at IETF 90 in Toronto, Canada, from 16:40-18:40 EDT. Agenda is: https://datatracker.ietf.org/meeting/90/agenda/dane/ https://datatracker.ietf.org/meeting/90/agenda/dane/ Streaming audio is at: http://ietf90streaming.dnsalias.net/ietf/ietf902.m3u http://ietf90streaming.dnsalias.net/ietf/ietf902.m3u Jabber chat room at: dane@jabber.ietf.org You're certainly welcome to show up and ask questions about the crypto involved. :-)