DES phase-out and 1.8

Nicolas Williams Nicolas.Williams at sun.com
Mon Jan 4 14:05:50 EST 2010


On Mon, Jan 04, 2010 at 01:23:30PM +0100, Love Hörnquist Åstrand wrote:
> 4 jan 2010 kl. 01:19 skrev Sam Hartman:
> > I'd actually be happier simply setting allow_weak_enctypes to false by
> > default than decoupling the defaults for default_tkt_enctypes and
> > default_tgs_enctypes.
> > 
> > [...]
> > 
> > However a lot of my thoughts are colored by really bad experience with
> > default_* from the bad old days.  This is not a strong objection by any
> > means.  I definitely want to see some motion on getting rid of des.
> 
> I recommend this path forward.

+1

Nico
-- 



More information about the krbdev mailing list