Last Call Review of draft-ietf-dnsop-must-not-sha1-03
review-ietf-dnsop-must-not-sha1-03-genart-lc-sarikaya-2025-03-04-00

Request Review of draft-ietf-dnsop-must-not-sha1
Requested revision No specific revision (document currently at 10)
Type IETF Last Call Review
Team General Area Review Team (Gen-ART) (genart)
Deadline 2025-03-06
Requested 2025-02-20
Authors Wes Hardaker , Warren Kumari
I-D last updated 2025-11-30 (Latest revision 2025-09-10)
Completed reviews Dnsdir IETF Last Call review of -03 by Florian Obser (diff)
Artart IETF Last Call review of -03 by Barry Leiba (diff)
Secdir IETF Last Call review of -03 by Yoav Nir (diff)
Genart IETF Last Call review of -03 by Behcet Sarikaya (diff)
Dnsdir Telechat review of -05 by Florian Obser (diff)
Opsdir Telechat review of -06 by Thomas Graf (diff)
Secdir Telechat review of -06 by Yoav Nir (diff)
Dnsdir Telechat review of -06 by Peter van Dijk (diff)
Assignment Reviewer Behcet Sarikaya
State Completed
Request IETF Last Call review on draft-ietf-dnsop-must-not-sha1 by General Area Review Team (Gen-ART) Assigned
Posted at https://mailarchive.ietf.org/arch/msg/gen-art/KZYSFa_z7v-WdYiKilRnnSo02tw
Reviewed revision 03 (document currently at 10)
Result Ready w/nits
Completed 2025-03-04
review-ietf-dnsop-must-not-sha1-03-genart-lc-sarikaya-2025-03-04-00
I am the assigned Gen-ART reviewer for this draft. The General Area
Review Team (Gen-ART) reviews all IETF documents being processed
by the IESG for the IETF Chair.  Please treat these comments just
like any other last call comments.

For more information, please see the FAQ at

<https://wiki.ietf.org/en/group/gen/GenArtFAQ>.

Document: draft-ietf-dnsop-must-not-sha1-03
Reviewer: Behcet Sarikaya
Review Date: 2025-03-04
IETF LC End Date: 2025-03-06
IESG Telechat date: Not scheduled for a telechat

Summary: This document deprecates SHA1, RSASHA1 and RSASHA1-NSEC3-SHA1.

Major issues:

Minor issues:

Nits/editorial comments:
Issues:

Discrepancy between the title and abstract
Title says SHA1 is deprecated while abstract says RSASHA1 and RSASHA1-NSEC3-SHA1 are deprecated

The security of the SHA-1 algorithm [RFC3174] 
Add from 2001

Reference for RSA SHA1, RSASHA1-NSEC3-SHA1 is RFC 3110 and it should be added 

Agree with Yoav’s review and Barry’s and Florian’s review on terminology