[Fedora-legal-list] UROnode licensing question
Jaroslav Skarvada
jskarvad at redhat.com
Fri Nov 28 13:13:37 UTC 2014
----- Original Message -----
> On 07/16/2014 10:52 AM, Jaroslav Skarvada wrote:
> > * MD2C.C - RSA Data Security, Inc., MD2 message-digest algorithm
> > */
>
> > Is it Fedora Compatible? Does [1] apply to it?
>
> Fedora software should not use the MD2 hashing algorithm for security
> reasons. It's also *extremely* slow, making it a poor choice for any
> applications, basically. Why does UROnode need it?
>
It is application for amateur radio, so both security/speed is not an
issue here; users, licensed hams, are aware of it.
I will probably propose patch adding support for SHA-1 or anything else,
maybe HOTP/TOTP based sysop auth, but upstream will probably not drop the MD2
support due to backward compatibility
regards
Jaroslav
More information about the legal
mailing list