From owner-freebsd-stable Wed Jul 26 9: 5: 7 2000 Delivered-To: freebsd-stable@freebsd.org Received: from wall.polstra.com (rtrwan160.accessone.com [206.213.115.74]) by hub.freebsd.org (Postfix) with ESMTP id 4FF8437BB82 for ; Wed, 26 Jul 2000 09:04:57 -0700 (PDT) (envelope-from jdp@polstra.com) Received: from vashon.polstra.com (vashon.polstra.com [206.213.73.13]) by wall.polstra.com (8.9.3/8.9.3) with ESMTP id JAA21632; Wed, 26 Jul 2000 09:04:52 -0700 (PDT) (envelope-from jdp@polstra.com) From: John Polstra Received: (from jdp@localhost) by vashon.polstra.com (8.9.3/8.9.1) id JAA20387; Wed, 26 Jul 2000 09:04:52 -0700 (PDT) (envelope-from jdp@polstra.com) Date: Wed, 26 Jul 2000 09:04:52 -0700 (PDT) Message-Id: <200007261604.JAA20387@vashon.polstra.com> To: stable@freebsd.org Reply-To: stable@freebsd.org Cc: jkh@zippy.osd.bsdi.com Subject: Re: 4.1-RELEASE will be tagged and done tonite, starting at 18:00 PDTT In-Reply-To: <10693.964597308@localhost> References: <10693.964597308@localhost> Organization: Polstra & Co., Seattle, WA Sender: owner-freebsd-stable@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.ORG In article <10693.964597308@localhost>, Jordan K. Hubbard wrote: > > However, is there any reason we can't fold the crypto distribution > > into bin now? Not the des or krb bits, but the 'crypto' one. > > Boy, I'd sure be a happy man if that were the case. It would make > installing FreeBSD a lot more straight-forward and secure out of the > box. The same could be done for the crypto sources too and we'd > eliminate a whole sub-dialog from sysinstall. I would lean more toward keeping the crypto code in separate distributions for a while longer. When we folded the cvs-crypto CVSup collection into cvs-all, I got an e-mail from one person who was quite upset because he assumed it meant that crypto wouldn't be in separate binary distributions any more. At least to him, it was important to keep the ability to be completely crypto-free. I don't feel so strongly about it myself, but I can see his point. For one thing, US crypto policy has been dictated 100% by politics for at least the past 10 years. It could easily be reversed yet again. (I don't think it will be reversed, but it is certainly a real possibility.) I would hate to see us throw out all the machinery we use to keep the crypto code separable, only to have to rebuild it again some time in the future. John -- John Polstra jdp@polstra.com John D. Polstra & Co., Inc. Seattle, Washington USA "Disappointment is a good sign of basic intelligence." -- Chögyam Trungpa To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-stable" in the body of the message