Re: des-die-die-die and RC4

I'm fine with deprecating 1DES and RC4-40/RC4-56,
and believe the RC4-128 based enctype will still be needed for interop
for a couple of years.

Actually, I would prefer the document to use a different quoting:

   "export strength RC4"  or "40-bit RC4 (RC4_EXP)"

rather than

   "export strength" RC4



I'm strongly opposed to "MUST NOT implement".
Personally I prefer "SHOULD have disabled by default", but would be OK
with "MUST have disable by default", eg.

"The use of 1DES or "export strength RC" enctypes is strongly discouraged.
Implementations that provide these enctypes, MUST have them disabled by
default.


-Martin
_______________________________________________
ietf-krb-wg mailing list
[email protected]
https://lists.anl.gov/mailman/listinfo/ietf-krb-wg