On Wed, Mar 17, 2004 at 06:20:09PM -0800, Rostislav Krasny wrote: > --- Dag-Erling Sm?rgrav <[email protected]> wrote: > > From the URL you mentioned: "Most applications have no ability to use > > Kerberos ciphersuites and will therefore be unaffected." > > Do you imply that applications with ability to use Kerberos > ciphersuites are impossible to be implemented for current versions of FreeBSD? The text before the above quoted "Most applications have no ability..." read A remote attacker could perform a carefully crafted SSL/TLS handshake against a server configured to use Kerberos ciphersuites [...] Instead of asking about impossibility in the abstract, ask if you do run servers that support Kerberos cipthersuites and, if yes, how to configure your software to not use them. Cheers. -- Ng Pheng Siong <[email protected]> http://firewall.rulemaker.net -+- Firewall Change Management & Version Control http://sandbox.rulemaker.net/ngps -+- Open Source Python Crypto & SSL _______________________________________________ [email protected] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-security To unsubscribe, send any mail to "[email protected]"