> I think we should do this in 5.6. +1 ... a renewed "emphasis on security" makes a good selling point when answering the "why should I upgrade" questions. At the same time, targeting the next minor version gives people ample time to plan/test/document changes. Secure stream encryption settings by default is a good place to start.
> I wonder if this is one of those rare times where an ini setting might make sense I'm generally anti-.ini but this sounds sensible.