[krbdev.mit.edu #7596] [Comment] PKINIT should allow missing DH param Q

"Greg Hudson via RT" <[email protected]> Fri, 19 Nov 2021 12:18:57 -0500
Newsgroups gmane.comp.encryption.kerberos.bugs
Message-ID <rt-4.4.3-2-1054297-1637342337-198.7596-8-0@kerborg-prod-app-1.mit.edu>
http://kerborg-prod-app-1.mit.edu/rt/Ticket/Display.html?id=7596
This is a comment.  It is not sent to the Requestor(s):

Microsoft dochelp replied that Microsoft fixed their side of this issue in
Windows 10, and that the final build of Windows 8.1 was the last version to
not always send the q parameter.

Windows 8.1 has been out of mainstream support as of January 2018, and will
hit end of life in January 2023.  Given our own release lag and the lack of
complaints, I don't think it would be useful to restore the workaround at this
point.