I actually agree that we should aim to remove these packages entirely,
rather than merely demoting them.

I think removal of the server is a clear-cut case.  Nobody should need
to run a pptp server nowadays on Ubuntu, and if anyone is, forcing them
to migrate to a better VPN solution on upgrade (or maintaining their own
pptpd without Ubuntu support) is IMHO reasonable.

Removing the client, I think, is less clear-cut.  If you don't have a
pptp server to talk to, then shipping the client is harmless.  If you DO
have a pptp server to talk to, then the client is essential.  Anyone
running a PPTP server on Windows these days should upgrade... but
dropping the client support from Ubuntu doesn't give the Ubuntu users
any more leverage to make their server admin upgrade, it just makes
Ubuntu unusable in such an environment.

So I think we should remove pptpd from the archive for noble, but that
we should propose removal of the clients via discussion with the Debian
maintainers.

** Changed in: pptpd (Ubuntu)
       Status: Incomplete => New

-- 
You received this bug notification because you are a member of Desktop
Packages, which is subscribed to network-manager-pptp in Ubuntu.
https://bugs.launchpad.net/bugs/2041751

Title:
  RM: Remove dangerously insecure MPPE PPTP from Ubuntu

Status in linux package in Ubuntu:
  New
Status in network-manager-pptp package in Ubuntu:
  New
Status in pptp-linux package in Ubuntu:
  New
Status in pptpd package in Ubuntu:
  Fix Released

Bug description:
  Remove dangerously insecure MPPE PPTP from Ubuntu

  https://pptpclient.sourceforge.net/protocol-security.phtml

  It has been dead for over 20 years now.

  Current Windows versions natively support IPSec and L2TP as much
  better alternatives.

  https://learn.microsoft.com/en-us/windows/win32/fwp/ipsec-
  configuration#how-to-use-wfp-to-configure-ipsec-policies

  https://learn.microsoft.com/en-US/troubleshoot/windows-
  server/networking/configure-l2tp-ipsec-server-behind-nat-t-device

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/linux/+bug/2041751/+subscriptions


-- 
Mailing list: https://launchpad.net/~desktop-packages
Post to     : desktop-packages@lists.launchpad.net
Unsubscribe : https://launchpad.net/~desktop-packages
More help   : https://help.launchpad.net/ListHelp

Reply via email to