On Tue, May 5, 2015 at 1:28 PM, William A Rowe Jr <wr...@rowe-clan.net> wrote:
> Was hoping for md4 vs. aes128 comparisons, (and AES-NI isn't everywhere,
> but will be, soon enough).
>
> While I agree md4 is less desirable, if we were going to make a
> recommendation,
> I'd go with favoring aes128 over md4 but retain md4 as a backup, in forced
> server
> preference.  And label this a known-insecure configuration.


Do you mean RC4?  I think the conventional wisdom (of the moment) is
to remove RC4 completely.
-- 
Eric Covener
cove...@gmail.com

Reply via email to