Re: [saag] SHA-1 to SHA-n transition

[Peter Gutmann <pgut001 at cs.auckland.ac.nz>]

Eric Rescorla <ekr at networkresonance.com> writes:

>"We must do something. This is something. We must do this."

So you've got the choice between the Polician's Fallacy (the above) and
psychosis ("PKI has been failing for 30 years [0], let's try more of it in the
hope that it suddenly works this time").

I think we need psychiatrists for this more than we need security geeks.

(I don't know the answer either, but admitting you have a problem with your
current approach is always the first step to recovery).

Peter.

[0] Or 20 years if you measure your epoch from X.509 rather than Kohnfelder.