[Fedora-legal-list] UROnode licensing question

Jaroslav Skarvada jskarvad at redhat.com
Fri Nov 28 14:58:53 UTC 2014



----- Original Message -----
> 
> 
> ----- Original Message -----
> > On 07/16/2014 10:52 AM, Jaroslav Skarvada wrote:
> > > * MD2C.C - RSA Data Security, Inc., MD2 message-digest algorithm
> > >   */
> > 
> > > Is it Fedora Compatible? Does [1] apply to it?
> > 
> > Fedora software should not use the MD2 hashing algorithm for security
> > reasons.  It's also *extremely* slow, making it a poor choice for any
> > applications, basically.  Why does UROnode need it?
> > 
> 
> It is application for amateur radio, so both security/speed is not an
> issue here; users, licensed hams, are aware of it.
> 
> I will probably propose patch adding support for SHA-1 or anything else,
> maybe HOTP/TOTP based sysop auth, but upstream will probably not drop the MD2
> support due to backward compatibility
> 
> regards
> 
> Jaroslav
>

Resolved by upstream, MD2 dropped, thanks all and sorry for noise, 

regards

Jaroslav


More information about the legal mailing list