Hi Ben,

> On 11. Dec 2020, at 9:13 PM, Benjamin Kaduk <[email protected]> wrote:
> 
> Could you please clarify what you mean by "second tier crypto" and "first
> tier crypto"?  I'm having a hard time understanding this statement.

Sorry for being unclear.

First tier = base system crypto for ports
Second tier = ports/packages crypto for ports

It's also true what John-Mark wrote that moving ports to ports-based
crypto does not solve security updates for the dependent base system
parts.  pkg-base can fix this, but then that also requires to stay
clear of package ABI clashes in dependent packages, which requires
concerted updates of base and ports packages or at least some sort of
version constraint / mismatch detection via something other than the
FreeBSD version number.


Cheers,
Franco
_______________________________________________
[email protected] mailing list
https://lists.freebsd.org/mailman/listinfo/freebsd-security
To unsubscribe, send any mail to "[email protected]"

Reply via email to