[
https://issues.apache.org/jira/browse/PROTON-2502?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=18089975#comment-18089975
]
ASF subversion and git services commented on PROTON-2502:
---------------------------------------------------------
Commit 32d84a4eeeafb94f810ae40977caa72613182bfd in qpid-proton's branch
refs/heads/main from Andrew Stitcher
[ https://gitbox.apache.org/repos/asf?p=qpid-proton.git;h=32d84a4ee ]
PROTON-2502: Stop testing using MD5 SASL mechanisms
MD5 based mechanisms are now considered insecure and future systems will
be configured without them available. We should stop using them to test
Proton so we can build on securely configured machines.
> Stop using deprecated (and insecure) SASL mechanisms based on MD5
> -----------------------------------------------------------------
>
> Key: PROTON-2502
> URL: https://issues.apache.org/jira/browse/PROTON-2502
> Project: Qpid Proton
> Issue Type: Improvement
> Components: build
> Reporter: Andrew Stitcher
> Assignee: Andrew Stitcher
> Priority: Minor
>
> MD5 has been considered broken and hence insecure for about a decade now. We
> should stop requiring it to test proton so that we can build on machines
> configured without insecure SASL mechanisms.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
