On Wed, 2014-09-17 at 14:16 +0200, Kai Engert wrote:
> I think it's good that we have started experimenting with these
> removals
> in the testing areas of Fedora, because it raises awareness of these
> issues, and hopefully can bring higher priority to getting OpenSSL and
> GnuTLS enhanced.
> 
> But given the heavy complaints, maybe it's necessary that we delay
> shipping the upstream removals into stable Fedora a little longer,
> until
> we have a better solution (either by having OpenSSL/GnuTLS enhanced,

Sounds good. Thanks for taking this issue seriously!

>  or
> maybe by implementing a way that enables users/admins to re-enable
> legacy CA certificates).

For the purposes of Fedora Workstation, no user intervention should be
required.

Michael

Attachment: signature.asc
Description: This is a digitally signed message part

-- 
devel mailing list
devel@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/devel
Fedora Code of Conduct: http://fedoraproject.org/code-of-conduct

Reply via email to