On Thu, 16 Aug 2007, Adam Gibson wrote:
> [...] I know that sha1 is getting outdated and has issues that make it 
> easier to crack but it seems like a bad idea to push an algorithm that 
> some of the well known OS vendors do not support by default...
> especially if we want dkim-milter to get used by as many mail servers as 
> we can.

Conversely, it seems like a bad idea for OS vendors to continue to ship a 
version of OpenSSL which doesn't support hash algorithms generally 
favoured by the security community.

If however this is a truly widespread problem, I might be able to 
entertain the idea of posting static binaries compiled against current 
OpenSSL versions.

> Or did I do something wrong and sha256 is supported with openssl 0.9.7a?

It is not.

-------------------------------------------------------------------------
This SF.net email is sponsored by: Splunk Inc.
Still grepping through log files to find problems?  Stop.
Now Search log events and configuration files using AJAX and a browser.
Download your FREE copy of Splunk now >>  http://get.splunk.com/
_______________________________________________
dkim-milter-discuss mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/dkim-milter-discuss

Reply via email to