[openssl-project] [openssl-dev] Blog post; changing in email, crypto policy, etc

Salz, Rich rsalz at akamai.com
Mon Jan 22 14:18:09 UTC 2018


Oh heck, we’re gonna get wrapped around the axle of wording again…

>    This is confusing. For starters it's mixing up two completely different
    things. It's one thing to make availability of *legacy* crypto (or
    protocol) an option, it's another thing to *introduce* insecure options.

Disagree.  That’s just an implementation detail.  From the end-user’s perspective, weakness is weakness no matter where or how it comes from.
  
> Now, does
    wording mean that omc is actually open to suggestions to *introduce*
    insecure options?
  
That wasn’t the intent.  It could happen.



More information about the openssl-project mailing list