In your previous mail you wrote: > What about always using both types of DS record? Why does everyone > publish both SHA-1 and SHA-256 digests? RFC 4509 is more than 6 > years old. => in fact perhaps it is the right time to jump to SHA-256 only? Regards Francis.Dupont at fdupont.fr