tech-security archive

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index][Old Index]

Re: Proposal: Remove MD5 / SHA1 support from veriexec



On Mon, Aug 28, 2017 at 02:29:14PM +0000, Taylor R Campbell wrote:
> 2. Remove MD5 &c. from veriexec(4) in the *next* version of NetBSD, at
> which point nobody will have any veriexec hashes with MD5 &c.

This is assuming that you DID upgrade to the next release in between.

But as Sevan pointed out: the default setup will not be affected, and there
are ways to recover for the typical setup where you have console access,
so I won't object.

Martin


Home | Main Index | Thread Index | Old Index