svn commit: r47124 - head/en_US.ISO8859-1/books/handbook/security

John-Mark Gurney jmg at FreeBSD.org
Tue Jul 28 17:22:23 UTC 2015


Author: jmg (src,ports committer)
Date: Tue Jul 28 17:22:22 2015
New Revision: 47124
URL: https://svnweb.freebsd.org/changeset/doc/47124

Log:
  DES is a terrible suggestion, and it MUST NOT be used per RFC7321..
  I plan to make code changes soon to break the old config anyways...
  
  This chapter needs to be updated badly, and me leaving the example
  here is not an endorsement to use it...
  
  Pointed out by:	Daniel Plominski

Modified:
  head/en_US.ISO8859-1/books/handbook/security/chapter.xml

Modified: head/en_US.ISO8859-1/books/handbook/security/chapter.xml
==============================================================================
--- head/en_US.ISO8859-1/books/handbook/security/chapter.xml	Tue Jul 28 17:07:30 2015	(r47123)
+++ head/en_US.ISO8859-1/books/handbook/security/chapter.xml	Tue Jul 28 17:22:22 2015	(r47124)
@@ -2364,7 +2364,7 @@ sainfo  (address 10.246.38.0/24 any addr
 {								# $network must be the two internal networks you are joining.
         pfs_group       1;
         lifetime        time    36000 sec;
-        encryption_algorithm    blowfish,3des,des;
+        encryption_algorithm    blowfish,3des;
         authentication_algorithm        hmac_md5,hmac_sha1;
         compression_algorithm   deflate;
 }</programlisting>


More information about the svn-doc-all mailing list