On 2014/10/06 10:41, Joakim Tjernlund wrote: > Still, would it not be a good thing if weak cryptos were removed?
Adding #ifdef's doesn't do anything to remove weak crypto, the ifdefs just sit there for years, in the main part unused/untested. Maybe they will work as expected - maybe they won't. If there are things which are weak and really not useful, diffs to simply remove that code will be looked on more favourably than diffs to add knobs. Unless a bunch of different combinations of ifdefs are regularly tested (and they won't be!) it just seems dangerous to have them in the main tree - if a particular distribution wants to disable certain code it's probably better if they do that locally and take responsibility for testing those changes themselves.
