From owner-freebsd-current  Thu Jun 20 14:37:49 1996
Return-Path: owner-current
Received: (from root@localhost)
          by freefall.freebsd.org (8.7.5/8.7.3) id OAA11236
          for current-outgoing; Thu, 20 Jun 1996 14:37:49 -0700 (PDT)
Received: from skynet.ctr.columbia.edu (skynet.ctr.columbia.edu [128.59.64.70])
          by freefall.freebsd.org (8.7.5/8.7.3) with SMTP id OAA11202;
          Thu, 20 Jun 1996 14:37:29 -0700 (PDT)
Received: (from wpaul@localhost) by skynet.ctr.columbia.edu (8.6.12/8.6.9) id RAA00984; Thu, 20 Jun 1996 17:35:20 -0400
From: Bill Paul <wpaul@skynet.ctr.columbia.edu>
Message-Id: <199606202135.RAA00984@skynet.ctr.columbia.edu>
Subject: Re: More bloat removal... secure_rpc
To: mark@grondar.za (Mark Murray)
Date: Thu, 20 Jun 1996 17:35:19 -0400 (EDT)
Cc: committers@freebsd.org, current@freebsd.org
In-Reply-To: <199606202023.WAA06488@grumble.grondar.za> from "Mark Murray" at Jun 20, 96 10:23:44 pm
X-Mailer: ELM [version 2.4 PL24]
Content-Type: text
Sender: owner-current@freebsd.org
X-Loop: FreeBSD.org
Precedence: bulk

Of all the gin joints in all the world, Mark Murray had to walk into 
mine and say:

> Hi folx
> 
> In the secure dist is secure_rpc. This has never worked, and now
> Bill Paul (wpaul) has got a other (?) sources going, but cannot
> import them because they are legally questionable. (Diffie-
> Hellman patent (?) ).
> 
> OK if I nuke'em?

It's okay by me. The Diffie-Hellman patent supposedly expires in 1997,
so I won't be able to do anything with it until then.

When I finally do start merging stuff in, I plan to import each individual
piece into the correct subdirectory in the tree, as with the NIS stuff.
This means keyserv and rpc.ypupdated will go in src/usr.sbin, keyenvoy in 
src/libexec, keylogin and chkey in src/usr.bin, and so on. The actual 
library modifications, new header files and man pages will get merged in
with the existing stuff, so no new directories will be needed for that,
and only a relatively small number of extra files will be added.
Secure RPC itself only uses DES for authentication, so it isn't
export-restricted and can be included on the CD as long as the DES
encryption functions are broken out. (Suggestions on what to use
for a replacement algorithm are welcome. I vote for rot13. :)

If it wasn't for Diffie-Hellman, I would have done this already.

(And of course, once Secure RPC in in place, the way will be clear
for me to inflict NIS+ on the unsuspecting free OS world. :)

-Bill

-- 
=============================================================================
-Bill Paul            (212) 854-6020 | System Manager
Work:         wpaul@ctr.columbia.edu | Center for Telecommunications Research
Home:  wpaul@skynet.ctr.columbia.edu | Columbia University, New York City
=============================================================================
License error: The license for this .sig file has expired. You must obtain
a new license key before any more witty phrases will appear in this space.
=============================================================================