[krbdev.mit.edu #8543] PKINIT draft9 code could possibly be removed

Greg Hudson via RT rt-comment at krbdev.mit.edu
Wed Feb 1 15:14:10 EST 2017


The draft9 code in the PKINIT module is intended to interoperate with 
Windows 2000, Windows XP, and Windows Server 2003.  All of those 
products have been out of support for over a year.  It may be time to 
remove the draft9 code, which would significantly reduce the complexity 
of the PKINIT module.

There is some risk that there could be people running those products 
beyond their support lifetime and depending on our compatibility with 
them (assuming it actually works).



More information about the krb5-bugs mailing list