From owner-cvs-all@FreeBSD.ORG  Wed Apr 30 12:44:03 2003
Return-Path: <owner-cvs-all@FreeBSD.ORG>
Delivered-To: cvs-all@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP
	id 928A637B404; Wed, 30 Apr 2003 12:44:03 -0700 (PDT)
Received: from obsecurity.dyndns.org
	(adsl-67-115-75-172.dsl.lsan03.pacbell.net [67.115.75.172])
	by mx1.FreeBSD.org (Postfix) with ESMTP
	id A04D843FBD; Wed, 30 Apr 2003 12:44:02 -0700 (PDT)
	(envelope-from kris@obsecurity.org)
Received: from rot13.obsecurity.org (rot13.obsecurity.org [10.0.0.5])
	by obsecurity.dyndns.org (Postfix) with ESMTP
	id 79E8C66B9B; Wed, 30 Apr 2003 12:44:02 -0700 (PDT)
Received: by rot13.obsecurity.org (Postfix, from userid 1000)
	id 393011554; Wed, 30 Apr 2003 12:44:02 -0700 (PDT)
Date: Wed, 30 Apr 2003 12:44:02 -0700
From: Kris Kennaway <kris@obsecurity.org>
To: Mark Murray <mark@grondar.org>
Message-ID: <20030430194402.GB84924@rot13.obsecurity.org>
References: <20030430181603.GD84302@rot13.obsecurity.org>
	<200304301908.h3UJ8HQL016143@grimreaper.grondar.org>
Mime-Version: 1.0
Content-Type: multipart/signed; micalg=pgp-sha1;
	protocol="application/pgp-signature"; boundary="ftEhullJWpWg/VHq"
Content-Disposition: inline
In-Reply-To: <200304301908.h3UJ8HQL016143@grimreaper.grondar.org>
User-Agent: Mutt/1.4i
cc: cvs-src@FreeBSD.org
cc: src-committers@FreeBSD.org
cc: Mark Murray <markm@FreeBSD.org>
cc: cvs-all@FreeBSD.org
cc: Kris Kennaway <kris@obsecurity.org>
Subject: Re: cvs commit: src/release Makefile src/release/scripts
	crypto-install.sh
X-BeenThere: cvs-all@freebsd.org
X-Mailman-Version: 2.1.1
Precedence: list
List-Id: CVS commit messages for the entire tree <cvs-all.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/cvs-all>,
	<mailto:cvs-all-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/cvs-all>
List-Post: <mailto:cvs-all@freebsd.org>
List-Help: <mailto:cvs-all-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/cvs-all>,
	<mailto:cvs-all-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Wed, 30 Apr 2003 19:44:04 -0000


--ftEhullJWpWg/VHq
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

On Wed, Apr 30, 2003 at 08:08:17PM +0100, Mark Murray wrote:
> Kris Kennaway writes:
> > >   KerberosIV removal. Also crunch down the "krb5" distribution into
> > >   "secure".
> >=20
> > Hmm, is it really a good idea to combine crypto and krb5?  krb5 is, I
> > suspect, a rarely-used feature in the wild.
>=20
> It will be a box on-the side.

I don't understand this sentence.

> Simplifies installations, and if folks
> dont want to use the applets, they won't have to.

But they are still there, and having a bunch of kerberos stuff
installed by default (as crypto is) is an additional security hazard
to the system.

Kris

--ftEhullJWpWg/VHq
Content-Type: application/pgp-signature
Content-Disposition: inline

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.1 (FreeBSD)

iD8DBQE+sCeBWry0BWjoQKURAmjqAJ9OhnJ2OxF6W7U4ALehlqaaiv4pdgCfWmYB
qgthvwLXrgFnANWYj2Q2/Mg=
=mCru
-----END PGP SIGNATURE-----

--ftEhullJWpWg/VHq--