One thing that came to me when catching up with this thread is that this
change of default will hose people setting up a YP server for the first
time.

Even though YP passwords would be set to the old salted-DES style, a YP
server isn't set up until ypinit(8) is run and "make" is run in /var/yp.
This copies passwd entries from /etc/master.passwd into the YP maps -- which
won't use salted-DES crypto because of this change.

This should be taken into heavy consideration here.

-- 
-- Todd Vierling <tv@wasabisystems.com>  *  Wasabi & NetBSD:  Run with it.
-- CDs, Integration, Embedding, Support -- http://www.wasabisystems.com/