F21 System Wide Change: System-wide crypto policy

Miloslav Trmač mitr at volny.cz
Wed Mar 5 14:22:33 UTC 2014


2014-03-05 9:58 GMT+01:00 Nikos Mavrogiannopoulos <nmav at redhat.com>:

> > The above proposed levels broadly make sense (taking 80/128/256 as a
> > "nice round numbers" that stand for detailed strenghts), we would
> > probably want to explicitly document the semantics (Is the semantics
> > of a level fixed forever or will it be updated?  Will we remove a weak
> > cipher from an existing level (ever / during a single Fedora release)?
> > Will we add a cipher to alevel (ever / during a single Fedora
> > release?).
>
> Would that be required to be part of the fedora change? I'd prefer if
> the semantics are not fixed before the actual levels are fixed.
>

I don't think it's required for FESCo to make a decision (but I can't speak
for other FESCo members); it should be defined by F21 release so that the
users know what they have been promised.
      Mirek
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.fedoraproject.org/pipermail/devel/attachments/20140305/de742042/attachment.html>


More information about the devel mailing list