Skip site navigation (1)Skip section navigation (2)
Date:      Sun, 7 Aug 2016 22:42:56 +0300
From:      Andrey Chernov <ache@freebsd.org>
To:        Slawa Olhovchenkov <slw@zxy.spb.ru>
Cc:        src-committers@freebsd.org, svn-src-all@freebsd.org, Oliver Pinter <oliver.pinter@hardenedbsd.org>, Bruce Simpson <bms@fastmail.net>, Warner Losh <wlosh@bsdimp.com>, svn-src-head@freebsd.org, =?UTF-8?Q?Dag-Erling_Sm=c3=b8rgrav?= <des@freebsd.org>
Subject:   Re: svn commit: r303716 - head/crypto/openssh
Message-ID:  <0cb2bd75-3086-fb72-c902-a05354536fc4@freebsd.org>
In-Reply-To: <20160807191041.GW8192@zxy.spb.ru>
References:  <c54673d0-8edd-b185-c86e-95a6aa6d0846@fastmail.net> <32b82f9f-7f78-6358-030a-90aed54bb8a8@freebsd.org> <0740b662-4a36-f834-229a-d16a5a6dde14@freebsd.org> <20160807173734.GD22212@zxy.spb.ru> <2dd7e952-ca28-57cb-ac8a-39d895b51d06@freebsd.org> <e43e43f2-4043-847f-f1d8-f791e2d8b91d@freebsd.org> <20160807182317.GE22212@zxy.spb.ru> <b335d3fb-5cea-4498-ec6e-fedf581d0cbe@freebsd.org> <20160807185237.GV8192@zxy.spb.ru> <f630354c-f555-a997-bea8-c9c51b150ccc@freebsd.org> <20160807191041.GW8192@zxy.spb.ru>

next in thread | previous in thread | raw e-mail | index | archive | help
On 07.08.2016 22:10, Slawa Olhovchenkov wrote:
> On Sun, Aug 07, 2016 at 10:02:52PM +0300, Andrey Chernov wrote:
> 
>> On 07.08.2016 21:52, Slawa Olhovchenkov wrote:
>>>> Why you still not
>>>> send your opinion to the author?
>>>>
>>>
>>> I am not sure about suitable response from autor.
>>> May be project [FreeBSD] choise some compromise.
>>
>> IMHO blindly choosing some compromise without asking author's opinion
>> first will be unwise. I will be glad in case someone from secteam@
>> discuss that with the author. Moreover, careless attempt to stay
>> compatible by any price can weak connections passed out of the server room.
>>
> 
> In generaly I am accept this.
> For this specific case enforcing strong crypo like Internet filtering
> from suicide.
> 

BTW, there is at least one alternative. F.e. security/putty from ports
still support weak min DH 1024, diffie-hellman-group1-sha1 and even des
you need. I don't check others because I am too lazy.



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?0cb2bd75-3086-fb72-c902-a05354536fc4>