Re: I-D Action: draft-ietf-krb-wg-des-die-die-die-02.txt
Simon Josefsson <[email protected]>
| Newsgroups | gmane.ietf.krb-wg |
|---|---|
| Message-ID | <[email protected]> |
Tom Yu <[email protected]> writes: > Changes since -01: > > Deprecate "export strength" RC4-HMAC-EXP. This requires a normative > downref to RFC 4757 (though a trivial one because its purpose is to > deprecate part of the downref). To me, deprecating RC4-HMAC-EXP but not RC4-HMAC implies that we regard non-export strength RC4-HMAC as secure. I think this is unfortunate. I'd prefer that we deprecated both RC4-HMAC and RC4-HMAC-EXP. Second to that, that we say nothing at all about RFC 4757 and let readers pass their own judgement on it. /Simon _______________________________________________ ietf-krb-wg mailing list [email protected] https://lists.anl.gov/mailman/listinfo/ietf-krb-wg