DES phase-out and 1.8
Nicolas Williams
Nicolas.Williams at sun.com
Mon Jan 4 14:05:50 EST 2010
On Mon, Jan 04, 2010 at 01:23:30PM +0100, Love Hörnquist Åstrand wrote:
> 4 jan 2010 kl. 01:19 skrev Sam Hartman:
> > I'd actually be happier simply setting allow_weak_enctypes to false by
> > default than decoupling the defaults for default_tkt_enctypes and
> > default_tgs_enctypes.
> >
> > [...]
> >
> > However a lot of my thoughts are colored by really bad experience with
> > default_* from the bad old days. This is not a strong objection by any
> > means. I definitely want to see some motion on getting rid of des.
>
> I recommend this path forward.
+1
Nico
--
More information about the krbdev
mailing list