Return-Path: Received: from pch.mit.edu (PCH.MIT.EDU [18.7.21.90]) by krbdev.mit.edu (Postfix) with ESMTP id 173B13F3D0; Thu, 7 Nov 2013 11:44:36 -0500 (EST) Received: from pch.mit.edu (pch.mit.edu [127.0.0.1]) by pch.mit.edu (8.13.6/8.12.8) with ESMTP id rA7GiObY024801; Thu, 7 Nov 2013 11:44:30 -0500 Received: from mailhub-dmz-1.mit.edu (mailhub-dmz-1.mit.edu [18.9.21.41]) by pch.mit.edu (8.13.6/8.12.8) with ESMTP id rA7E16XK024575 for ; Thu, 7 Nov 2013 09:01:06 -0500 Received: from dmz-mailsec-scanner-7.mit.edu (dmz-mailsec-scanner-7.mit.edu [18.7.68.36]) by mailhub-dmz-1.mit.edu (8.13.8/8.9.2) with ESMTP id rA7E03FL023199 for ; Thu, 7 Nov 2013 09:01:05 -0500 X-Auditid: 12074424-b7f0b8e000004bf2-4e-527b9d205b52 Authentication-Results: symauth.service.identifier Received: from mail.sman.dk (gw01.sman.dk [77.243.53.201]) by dmz-mailsec-scanner-7.mit.edu (Symantec Messaging Gateway) with SMTP id D6.E2.19442.02D9B725; Thu, 7 Nov 2013 09:01:05 -0500 (EST) Received: from mac-georg.netic.dk (netic-fw.novipark.dk [77.243.62.62]) by mail.sman.dk (Postfix) with ESMTPSA id 285AC219E9 for ; Thu, 7 Nov 2013 15:01:02 +0100 (CET) Dkim-Signature: v=1; a=rsa-sha256; c=simple/simple; d=sman.dk; s=2012; t=1383832862; bh=QQSc1tJUOGZy7KaOTA5IsLxZ1cUr/Id9y2RFxdNmkWs=; h=From:Subject:Date:To; b=CiJ9ikzlGt2/Sgdy4eXpi8o5MdK5kRf3GQ88/kMbJOe9LmnJXTcJgGWOptRdpzvIZ eeDjtzg++CcWe1KEwXK3KoeXTQzvPEThwrRJVcjabIAWBjmEUzWHwNN9aHVgNhpIDM ZO9iA0VCY/ExLX7DQFL2Hn3BzrJtKGD3x1fQfePKR+7iSE1ueyhOlYep5oQuY34Tkd vjx37av7NWjgf8RSGbyLpbk53bZCh5gPE+EvY7UFX5WrSCqThDiSi7coE/1h6rFR8z WroZ8IoSfcF7wtsVLvd2lbZJNeDj3q0TOovOhvq4CdON/NiCHOHoZhNMa7ugCD9+If RIhJQiHMYNdRg== From: Georg Sluyterman Content-Type: text/plain; charset=us-ascii Subject: Documentation__Retiring DES Message-ID: Date: Thu, 7 Nov 2013 15:00:59 +0100 To: krb5-bugs@mit.edu MIME-Version: 1.0 (Mac OS X Mail 6.6 \(1510\)) X-Mailer: Apple Mail (2.1510) X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFvrHIsWRWlGSWpSXmKPExsXi+9n0pK7i3Ooggzv/+SwaHh5nd2D0aDpz lDmAMYrLJiU1J7MstUjfLoEr4/HmB8wFJ5kqLu9oY2xgnMDUxcjJISFgItH++CEjiM0oYCSx +9wrVoi4mMSFe+vZuhi5OIQEDjNK3Ltxhx3C2c8ocWDCcRaQKhaBSSwSP2f6gNhsAmoSu4// BYszC2hJ3Pj3kgnC1pZYtvA1M4gtLKAi8b/7DNg2XgEria8/fkPNUZH4t2gFWI2IgKjEy7/H gOIcQDV6Ett/yUEcJCtx+txzlgmM/LOQbJiFZMMshI4FjMyrGGVTcqt0cxMzc4pTk3WLkxPz 8lKLdM31cjNL9FJTSjcxAgNPiN1FZQdj8yGlQ4wCHIxKPLwzaqqChFgTy4orcw8xSnIwKYny np5VHSTEl5SfUpmRWJwRX1Sak1p8iFGCg1lJhHd/H1CONyWxsiq1KB8mJc3BoiTOe4vDPkhI ID2xJDU7NbUgtQgmy8TBfohRhoNDSYLXdg5Qt2BRanpqRVpmTgmyGk4QwQWyhgdoTTJIIW9x QWJucWY6RNEpRkUpcV5mkIQASCKjNA9uACxZXGKUlRLmZWRgYBDiAboA6HFU+VeM4kBPC/Nq gUzhycwrgZv+CmgxE9DikF+VIItLEhFSUg2MSRm6Hw9Iz7RRqQ74Wen1+1vIsvoOSZvDpyqn 7M4rzQ6ZYsZaVfvb6rzPgnkxLqcm1KwrMzsZIprVeW/K2sN3yp6nC0nM3qzQsUaX9VpD7iPT Y/9zT/4MPF+98YaI/1GF6Nr7VT36HTprN3Jnf5ZbKXGxrvjYVOEn1+7uX3ivXjKQjyPzW5u4 EktxRqKhFnNRcSIAkwQZyhEDAAA= Content-Transfer-Encoding: 8bit X-MIME-Autoconverted: from quoted-printable to 8bit by pch.mit.edu id rA7E16XK024575 X-Mailman-Approved-At: Thu, 07 Nov 2013 11:31:32 -0500 X-Beenthere: krb5-bugs-incoming@mailman.mit.edu X-Mailman-Version: 2.1.6 Precedence: list Sender: krb5-bugs-incoming-bounces@PCH.mit.edu Errors-To: krb5-bugs-incoming-bounces@PCH.mit.edu X-RT-Original-Encoding: us-ascii Content-Length: 309 http://web.mit.edu/kerberos/krb5-devel/doc/admin/advanced/retiring-des.html "If there remain legacy services which do not support non-DES enctypes (such as AFS), allow_weak_crypto must remain enabled on the KDC." This is not true any more (since July 2013). See OpenAFS.org. -- Regards Georg Sluyterman