Hi, On Wed, Sep 07, 2016 at 12:18:17PM +0300, Samuli Seppänen wrote: > We have already dropped XP support from OpenVPN Git "master". I think > now is the time to drop official XP support altogether, but to maintain > Vista support util the next tap-windows6 release.
As long as XP is in widespread use, I think we should provide up-to-date
and secure 2.3.x builds. Worst thing we can do is "not provide updates"
in case a new openssl (or openvpn) bug shows up, and leave users out
in the cold. So this means about 2-3 more years, I think... (do you
have numbers how many people still download the XP installers?)
Note that the microsoft guidelines do not say "no more SHA1" but
"no SHA1 *unless* targeting Vista", which we do - so there must be a
way to get updated SHA1 certificates...
What we should do, though, is declare and document a strict "end of XP
support" policy, like "January 1st, 2018", make this very obvious in the
installer (maybe even "add a separate acknowledgment popup"), AND refuse
to actually start the GUI after that date (or so)...
gert
--
USENET is *not* the non-clickable part of WWW!
//www.muc.de/~gert/
Gert Doering - Munich, Germany g...@greenie.muc.de
fax: +49-89-35655025 g...@net.informatik.tu-muenchen.de
signature.asc
Description: PGP signature
------------------------------------------------------------------------------
_______________________________________________ Openvpn-devel mailing list Openvpn-devel@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/openvpn-devel
