On Tue, May 5, 2015 at 1:28 PM, William A Rowe Jr <wr...@rowe-clan.net> wrote: > Was hoping for md4 vs. aes128 comparisons, (and AES-NI isn't everywhere, > but will be, soon enough). > > While I agree md4 is less desirable, if we were going to make a > recommendation, > I'd go with favoring aes128 over md4 but retain md4 as a backup, in forced > server > preference. And label this a known-insecure configuration.
Do you mean RC4? I think the conventional wisdom (of the moment) is to remove RC4 completely. -- Eric Covener cove...@gmail.com
