freebsd security - Jul 2015 - remove IPsec SKIPJACK support...

> On Jul 27, 2015, at 7:57 PM, John-Mark Gurney <jmg at funkthat.com>
wrote:
> 
> I would like to remove it from HEAD immediately as I don't see a use
> for it.  Some time ago I proposed removing Skipjack from the OCF in 12, but
personally, now that I think about how long 12 is, we deprecate these sooner
rather than later.
Are we also going to comply with RFC 7321?

https://tools.ietf.org/html/rfc7321

Jim Thompson wrote this message on Mon, Jul 27, 2015 at 20:24
-0500:
> > On Jul 27, 2015, at 7:57 PM, John-Mark Gurney <jmg at
funkthat.com> wrote:
> > 
> > I would like to remove it from HEAD immediately as I don't see a
use
> > for it.  Some time ago I proposed removing Skipjack from the OCF in
12, but personally, now that I think about how long 12 is, we deprecate these
sooner rather than later.
> 
> Are we also going to comply with RFC 7321?
> 
> https://tools.ietf.org/html/rfc7321
Looks like the only thing we need to change to comply w/ RFC7321 is
to remove DES support (note to those that don't read closely, DES,
not 3DES aka triple-DES), and I am fine removing DES support sooner
rather than later...

-- 
  John-Mark Gurney				Voice: +1 415 225 5579

     "All that I will do, has been done, All that I have, has not."