Given that md5 looks to be pretty shaky by now, should we adjust the passwd.conf docs and other such places to deprecate/recommend against using md5 passwords? If so it would be a good thing to do it before releasing -5... -- David A. Holland dholland%netbsd.org@localhost