-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
On 2016-10-08 at 19:11 -0400, Phil Pennock wrote:
> Those who follow cryptographic news may have already seen concerns
[...]
> 1. Good OS packagers generated new DH parameters on your system, and
> still do so;
When I wrote that, I was specifically thinking of the Debian maintainers
who set that up and work well with the Exim maintainers to ensure that
both sides are best helping our users.
In fact verification before sending, I saw that in fact the Debian
maintainers switched to depending upon the logic which _I_ wrote for
Exim, to use the RFC 5114 primes. Which led to:
> 5. Debian (and thus Ubuntu) stopped configuring packages to use custom
> DH parameters,
Oww. I am sorry. I did not mean to construct something which implied
that Debian is not a good packager. The opposite was my intent.
I missed something in editing. My position is simple: I screwed over
the Debian package maintainers of Exim, by accident. And now I just
insulted them by accident.
I'm going to step away from the keyboard for the evening before I
accidentally start a million-post flamewar and the collapse of a small
nation.
Regards, and apologies,
- -Phil
-----BEGIN PGP SIGNATURE-----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=seF5
-----END PGP SIGNATURE-----
--
## List details at https://lists.exim.org/mailman/listinfo/exim-announce Exim details at http://www.exim.org/ ##
Hash: SHA256
On 2016-10-08 at 19:11 -0400, Phil Pennock wrote:
> Those who follow cryptographic news may have already seen concerns
[...]
> 1. Good OS packagers generated new DH parameters on your system, and
> still do so;
When I wrote that, I was specifically thinking of the Debian maintainers
who set that up and work well with the Exim maintainers to ensure that
both sides are best helping our users.
In fact verification before sending, I saw that in fact the Debian
maintainers switched to depending upon the logic which _I_ wrote for
Exim, to use the RFC 5114 primes. Which led to:
> 5. Debian (and thus Ubuntu) stopped configuring packages to use custom
> DH parameters,
Oww. I am sorry. I did not mean to construct something which implied
that Debian is not a good packager. The opposite was my intent.
I missed something in editing. My position is simple: I screwed over
the Debian package maintainers of Exim, by accident. And now I just
insulted them by accident.
I'm going to step away from the keyboard for the evening before I
accidentally start a million-post flamewar and the collapse of a small
nation.
Regards, and apologies,
- -Phil
-----BEGIN PGP SIGNATURE-----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=seF5
-----END PGP SIGNATURE-----
--
## List details at https://lists.exim.org/mailman/listinfo/exim-announce Exim details at http://www.exim.org/ ##