From owner-freebsd-arch@FreeBSD.ORG Fri May 16 02:19:22 2003 Return-Path: Delivered-To: freebsd-arch@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 0862237B401 for ; Fri, 16 May 2003 02:19:21 -0700 (PDT) Received: from newtrinity.zeist.de (newtrinity.zeist.de [217.24.217.8]) by mx1.FreeBSD.org (Postfix) with ESMTP id 8E67743F93 for ; Fri, 16 May 2003 02:19:20 -0700 (PDT) (envelope-from marius@newtrinity.zeist.de) Received: from newtrinity.zeist.de (localhost [127.0.0.1]) h4G9JINQ083817; Fri, 16 May 2003 11:19:18 +0200 (CEST) (envelope-from marius@newtrinity.zeist.de) Received: (from marius@localhost) by newtrinity.zeist.de (8.12.9/8.12.9/Submit) id h4G9JCj3083816; Fri, 16 May 2003 11:19:12 +0200 (CEST) (envelope-from marius) Date: Fri, 16 May 2003 11:19:12 +0200 From: Marius Strobl To: Mark Murray Message-ID: <20030516111912.A83445@newtrinity.zeist.de> References: <200305160720.h4G7K7gN028186@grimreaper.grondar.org> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline User-Agent: Mutt/1.2.5.1i In-Reply-To: <200305160720.h4G7K7gN028186@grimreaper.grondar.org>; from mark@grondar.org on Fri, May 16, 2003 at 08:20:07AM +0100 cc: arch@freebsd.org cc: Dag-Erling Smorgrav Subject: Re: NOCRYPT / NOSECURE X-BeenThere: freebsd-arch@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: Discussion related to FreeBSD architecture List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 16 May 2003 09:19:22 -0000 On Fri, May 16, 2003 at 08:20:07AM +0100, Mark Murray wrote: > > SO - my query reduces to "How many folks are there out there who can > NOT have crypto SOURCES on their system, even if they are doing a non > crypto build?" > Not in terms of export control or disk space but I'm concerend that if fundamental things of the base distribution depend on OpenSSL and friends this will lead to the need of much more frequent updates of the base every time yet again another expoitable bug is found in them. Not checking out the crypto sources and using the port versions of the components in question if they are really needed one is on the real safe side and there's usually no need to update FreeBSD for quite some time.