Date: Wed, 30 Apr 2003 12:44:02 -0700 From: Kris Kennaway <kris@obsecurity.org> To: Mark Murray <mark@grondar.org> Cc: Kris Kennaway <kris@obsecurity.org> Subject: Re: cvs commit: src/release Makefile src/release/scripts crypto-install.sh Message-ID: <20030430194402.GB84924@rot13.obsecurity.org> In-Reply-To: <200304301908.h3UJ8HQL016143@grimreaper.grondar.org> References: <20030430181603.GD84302@rot13.obsecurity.org> <200304301908.h3UJ8HQL016143@grimreaper.grondar.org>
next in thread | previous in thread | raw e-mail | index | archive | help
--ftEhullJWpWg/VHq Content-Type: text/plain; charset=us-ascii Content-Disposition: inline Content-Transfer-Encoding: quoted-printable On Wed, Apr 30, 2003 at 08:08:17PM +0100, Mark Murray wrote: > Kris Kennaway writes: > > > KerberosIV removal. Also crunch down the "krb5" distribution into > > > "secure". > >=20 > > Hmm, is it really a good idea to combine crypto and krb5? krb5 is, I > > suspect, a rarely-used feature in the wild. >=20 > It will be a box on-the side. I don't understand this sentence. > Simplifies installations, and if folks > dont want to use the applets, they won't have to. But they are still there, and having a bunch of kerberos stuff installed by default (as crypto is) is an additional security hazard to the system. Kris --ftEhullJWpWg/VHq Content-Type: application/pgp-signature Content-Disposition: inline -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.1 (FreeBSD) iD8DBQE+sCeBWry0BWjoQKURAmjqAJ9OhnJ2OxF6W7U4ALehlqaaiv4pdgCfWmYB qgthvwLXrgFnANWYj2Q2/Mg= =mCru -----END PGP SIGNATURE----- --ftEhullJWpWg/VHq--
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20030430194402.GB84924>