remove IPsec SKIPJACK support...

John-Mark Gurney jmg at funkthat.com
Tue Jul 28 03:41:58 UTC 2015


Jim Thompson wrote this message on Mon, Jul 27, 2015 at 20:24 -0500:
> > On Jul 27, 2015, at 7:57 PM, John-Mark Gurney <jmg at funkthat.com> wrote:
> > 
> > I would like to remove it from HEAD immediately as I don't see a use
> > for it.  Some time ago I proposed removing Skipjack from the OCF in 12, but personally, now that I think about how long 12 is, we deprecate these sooner rather than later.
> 
> Are we also going to comply with RFC 7321?
> 
> https://tools.ietf.org/html/rfc7321

Looks like the only thing we need to change to comply w/ RFC7321 is
to remove DES support (note to those that don't read closely, DES,
not 3DES aka triple-DES), and I am fine removing DES support sooner
rather than later...

-- 
  John-Mark Gurney				Voice: +1 415 225 5579

     "All that I will do, has been done, All that I have, has not."


More information about the freebsd-net mailing list