From owner-svn-src-all@freebsd.org  Fri Jan 22 09:37:52 2016
Return-Path: <owner-svn-src-all@freebsd.org>
Delivered-To: svn-src-all@mailman.ysv.freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org
 [IPv6:2001:1900:2254:206a::19:1])
 by mailman.ysv.freebsd.org (Postfix) with ESMTP id 04018A8AF1F;
 Fri, 22 Jan 2016 09:37:52 +0000 (UTC) (envelope-from des@des.no)
Received: from smtp.des.no (smtp.des.no [194.63.250.102])
 by mx1.freebsd.org (Postfix) with ESMTP id C2069196A;
 Fri, 22 Jan 2016 09:37:51 +0000 (UTC) (envelope-from des@des.no)
Received: from desk.des.no (smtp.des.no [194.63.250.102])
 by smtp.des.no (Postfix) with ESMTP id B559A5C76;
 Fri, 22 Jan 2016 09:37:43 +0000 (UTC)
Received: by desk.des.no (Postfix, from userid 1001)
 id E197E4805B; Fri, 22 Jan 2016 10:37:43 +0100 (CET)
From: =?utf-8?Q?Dag-Erling_Sm=C3=B8rgrav?= <des@des.no>
To: Conrad Meyer <cem@FreeBSD.org>
Cc: src-committers@freebsd.org, svn-src-all@freebsd.org,
 svn-src-head@freebsd.org
Subject: Re: svn commit: r294495 - in head: . crypto/openssh
References: <201601211110.u0LBAEI1081858@repo.freebsd.org>
 <CAG6CVpXXadnEJt+=tjiyhpk04LtTeiAoOqYeTn2-bsxwJjmTAw@mail.gmail.com>
Date: Fri, 22 Jan 2016 10:37:43 +0100
In-Reply-To: <CAG6CVpXXadnEJt+=tjiyhpk04LtTeiAoOqYeTn2-bsxwJjmTAw@mail.gmail.com>
 (Conrad Meyer's message of "Thu, 21 Jan 2016 09:31:34 -0800")
Message-ID: <86r3hauf88.fsf@desk.des.no>
User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/24.5 (berkeley-unix)
MIME-Version: 1.0
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: quoted-printable
X-BeenThere: svn-src-all@freebsd.org
X-Mailman-Version: 2.1.20
Precedence: list
List-Id: "SVN commit messages for the entire src tree \(except for &quot;
 user&quot; and &quot; projects&quot; \)" <svn-src-all.freebsd.org>
List-Unsubscribe: <https://lists.freebsd.org/mailman/options/svn-src-all>,
 <mailto:svn-src-all-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/svn-src-all/>
List-Post: <mailto:svn-src-all@freebsd.org>
List-Help: <mailto:svn-src-all-request@freebsd.org?subject=help>
List-Subscribe: <https://lists.freebsd.org/mailman/listinfo/svn-src-all>,
 <mailto:svn-src-all-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Fri, 22 Jan 2016 09:37:52 -0000

Conrad Meyer <cem@FreeBSD.org> writes:
> Are we going to maintain DSA key support after upstream deprecates it
> entirely?  And why?

I am not aware of any plans to remove DSA support.  It has simply been
disabled in the default run-time configuration - unlike, for instance,
libwrap, which was removed entirely, and SSHv1, which needs to be
enabled at compile time.  I understand that decision (although I
disagree with their justification, or at least the way it was worded),
but we still have users who use DSA keys and who will be locked out of
their systems if we disable DSA without sufficient advance warning.  I
will look into what steps can be taken to deprecate DSA without causing
our users too much inconvenience.

DES
--=20
Dag-Erling Sm=C3=B8rgrav - des@des.no