Subject: | Remove des3 and arcfour from supported_enctypes |
The des3 and arcfour enctypes use weaker string-to-key algorithms than the AES enctypes.
Remove them from the default supported_enctypes setting to avoid generating password-
derived keys for them. This could cause compatibility problems with Windows XP and similar
vintage Windows platforms, but XP was recently completely desupported. We should document
these compatibility considerations with this change.
Remove them from the default supported_enctypes setting to avoid generating password-
derived keys for them. This could cause compatibility problems with Windows XP and similar
vintage Windows platforms, but XP was recently completely desupported. We should document
these compatibility considerations with this change.