Re: I-D Action: draft-ietf-krb-wg-des-die-die-die-02.txt

+1

Windows XP is under extended support until 2014 and Windows Server 2003 until 2015, so we can expect that customers will continue to use until at least then.

Also since I am catching up on my email I have been reading all the threads at once and it seems that if we restrict this draft to RFC to DES it would go faster. I agree we should message that RC4 is next and we can even start a RC4 draft to make it obvious to people outside the working group.   

Thanks,
Michiko Short | Program Manager | Windows Security & Identity



-----Original Message-----
From: [email protected] [mailto:[email protected]] On Behalf Of Nico Williams
Sent: Friday, February 10, 2012 12:57 PM
To: Russ Allbery
Cc: [email protected]
Subject: Re: [Ietf-krb-wg] I-D Action: draft-ietf-krb-wg-des-die-die-die-02.txt

On Fri, Feb 10, 2012 at 2:41 PM, Russ Allbery <[email protected]> wrote:
> Note that RC4-HMAC is the only non-DES enctype available if one needs 
> interoperability with Windows XP systems, which is still an issue for 
> a lot of sites.  By contrast, there's much less operational need for 
> either DES or RC4-HMAC-EXP these days.
>
> Sites that move from DES to RC4-HMAC are almost certainly much better 
> off, so I would be hesitant to give both of those enctypes the same 
> status as long as Windows XP is still a significant going concern.

+1

But we could warn that we intend to deprecate RC4-HMAC next.

Nico
--
_______________________________________________
ietf-krb-wg mailing list
[email protected]
https://lists.anl.gov/mailman/listinfo/ietf-krb-wg
_______________________________________________
ietf-krb-wg mailing list
[email protected]
https://lists.anl.gov/mailman/listinfo/ietf-krb-wg