Re: Proposal: Remove MD5 / SHA1 support from veriexec

Martin Husemann <[email protected]> Mon, 28 Aug 2017 16:32:24 +0200

Newsgroups	gmane.os.netbsd.devel.security
Message-ID	<[email protected]>

On Mon, Aug 28, 2017 at 02:29:14PM +0000, Taylor R Campbell wrote:
> 2. Remove MD5 &c. from veriexec(4) in the *next* version of NetBSD, at
> which point nobody will have any veriexec hashes with MD5 &c.

This is assuming that you DID upgrade to the next release in between.

But as Sevan pointed out: the default setup will not be affected, and there
are ways to recover for the typical setup where you have console access,
so I won't object.

Martin