_kdc_is_weak_exception() relevance in 2014

Ken Dreyer <[email protected]> Mon, 22 Sep 2014 13:37:32 -0600

Newsgroups	gmane.comp.encryption.kerberos.heimdal.general
Message-ID	<CAD3FbMUD61f227jD8Y0wnNLqVMqsVzUHVBUjsDNf61ung4ojCQ@mail.gmail.com>

It seems that _kdc_is_weak_exception() unconditionally allows the KDC
to return a 1DES session key, even if I run the server with
--disable-des.

Now that AFS has had rxkad-kdf for a while, can we remove
_kdc_is_weak_exception() altogether?

- Ken

lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.