Re: des-die-die-die and RC4
Simon Josefsson <[email protected]>
| Newsgroups | gmane.ietf.krb-wg |
|---|---|
| Message-ID | <[email protected]> |
Sam Hartman <[email protected]> writes: > My read is that the rough consensus of the working group is that > deprecating RC4 at this time is not desirable. > > I think whether to deprecate export grade RC4 is still an open issue. I > think that there are no objections at this point, although I'm not > entirely sure of that. In particular, I think Simon was OK with the > latest proposal from Tom although it sounded like he might prefer to be > silent on the entire issue. > > I'd really appreciate comments on whether people want to deprecate > rc4-exp. I think we have a couple of yes's and several nervous > not-quite-objections. I think that's replacing a couple of yeses, two > objections and several not-quite-objections from earlier in the week. I'm fine with deprecating RC4-EXP and not RC4 if the security considerations are modified to point at the security considerations of RFC 4757 instead of saying that RC4 is secure. /Simon _______________________________________________ ietf-krb-wg mailing list [email protected] https://lists.anl.gov/mailman/listinfo/ietf-krb-wg