Internet.nl document on ciphers

[yanainic]

Hi guys ! We are receiving some questions from some of our end users about tests on DNSSEC and on some parallel tests in other tools we found ciphers that are phase-out and/or deprecated in the Internet.nl tool and in others that are not yet (probably outdated), looking to check which reference source you use to see the status of the ciphers I found [link to https://english.ncsc.nl/publications/publications/2021/january/19/it-security-guidelines-for-transport-layer-security-2.1], do you still use it as a reference??" Could you help us ?

Thanks in advance Flavio

[bwbroersma]

Regarding the checking of DNSSEC algorithms, this is on the wish list:

• 1288

Regarding TLS ciphers:

• see this comment https://github.com/internetstandards/Internet.nl/issues/1266#issuecomment-1936096124:

  Internet.nl uses the NCSC-NL - IT Security Guidelines for Transport Layer Security (TLS) as baseline. NCSC-NL is currently in the process of revising the TLS guidelines document. If the update is published Internet.nl will follow.

• see the #1345, note that v1.9 is not yet released, the v2.0 is actively being worked on (#1218), the NCSC-NL revising of the TLS guidelines probably won't be finished in June/July.

[yanainic]

Thank you so much ! Flavio