Re: I-D Action: draft-ietf-krb-wg-des-die-die-die-02.txt

Sam Hartman <[email protected]>
Newsgroups gmane.ietf.krb-wg
Message-ID <[email protected]>
>>>>> "Simon" == Simon Josefsson <[email protected]> writes:

    Simon> Tom Yu <[email protected]> writes:
    >> Changes since -01:
    >> 
    >> Deprecate "export strength" RC4-HMAC-EXP.  This requires a
    >> normative downref to RFC 4757 (though a trivial one because its
    >> purpose is to deprecate part of the downref).

    Simon> To me, deprecating RC4-HMAC-EXP but not RC4-HMAC implies that
    Simon> we regard non-export strength RC4-HMAC as secure.  I think
    Simon> this is unfortunate.

I do regard rc4-hmac as reasonably secure.
Am I missing something?


I do not support discouraging the use of rc4-hmac for the reasons Russ
cites.
_______________________________________________
ietf-krb-wg mailing list
[email protected]
https://lists.anl.gov/mailman/listinfo/ietf-krb-wg
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.