Return-Path: Delivered-To: apmail-apr-dev-archive@www.apache.org Received: (qmail 42338 invoked from network); 4 Jan 2007 03:07:14 -0000 Received: from hermes.apache.org (HELO mail.apache.org) (140.211.11.2) by minotaur.apache.org with SMTP; 4 Jan 2007 03:07:14 -0000 Received: (qmail 63418 invoked by uid 500); 4 Jan 2007 03:07:20 -0000 Delivered-To: apmail-apr-dev-archive@apr.apache.org Received: (qmail 63376 invoked by uid 500); 4 Jan 2007 03:07:19 -0000 Mailing-List: contact dev-help@apr.apache.org; run by ezmlm Precedence: bulk List-Post: List-Help: List-Unsubscribe: List-Id: Delivered-To: mailing list dev@apr.apache.org Received: (qmail 63365 invoked by uid 99); 4 Jan 2007 03:07:19 -0000 Received: from herse.apache.org (HELO herse.apache.org) (140.211.11.133) by apache.org (qpsmtpd/0.29) with ESMTP; Wed, 03 Jan 2007 19:07:19 -0800 X-ASF-Spam-Status: No, hits=-0.0 required=10.0 tests=SPF_HELO_PASS,SPF_PASS X-Spam-Check-By: apache.org Received-SPF: pass (herse.apache.org: domain of bojan@rexursive.com designates 203.171.74.242 as permitted sender) Received: from [203.171.74.242] (HELO beauty.rexursive.com) (203.171.74.242) by apache.org (qpsmtpd/0.29) with ESMTP; Wed, 03 Jan 2007 19:07:10 -0800 Received: from [172.27.0.24] (shrek.rexursive.com [172.27.0.24]) by beauty.rexursive.com (Postfix) with ESMTP id A536A2560F9; Thu, 4 Jan 2007 14:06:48 +1100 (EST) Subject: Re: APR 2.0.0 - deprecate MD4 at last? From: Bojan Smojver To: "William A. Rowe, Jr." Cc: dev@apr.apache.org In-Reply-To: <459C4AA9.7070608@rowe-clan.net> References: <459C4AA9.7070608@rowe-clan.net> Content-Type: text/plain Date: Thu, 04 Jan 2007 14:06:48 +1100 Message-Id: <1167880008.2961.15.camel@shrek.rexursive.com> Mime-Version: 1.0 X-Mailer: Evolution 2.8.2.1 (2.8.2.1-2.fc6) Content-Transfer-Encoding: 7bit X-Virus-Checked: Checked by ClamAV on apache.org On Wed, 2007-01-03 at 18:30 -0600, William A. Rowe, Jr. wrote: > If configuring for a FIPS ssl environment, we will also have to stub out MD5 > entirely since it too is a prohibited algorithm. Apparently, they claim it's still good for HMAC stuff. -- Bojan