John Hascall wrote: >> This is a pointless discussion. We aren't going to break existing >> deployments of AFS. > > So all future releases of OpenAFS forever will support rxkad > and K4/DES-based tokens? And there will be no way for a cell > to turn that off? Really? > > John
You will be able to turn it off as we described. You remove the afs/[EMAIL PROTECTED] key and it will no longer be used. However, there must be a smooth transition mechanism and that means no flag days. Please do not confuse the deployment requirements with the distribution requirements. For the policy on DES, see http://www.openafs.org/no-more-des.html Jeffrey Altman
smime.p7s
Description: S/MIME Cryptographic Signature
