Re:Fedora 21 To Have DNSSEC Validation Enabled By Default
by jg03 on Friday May 02, 2014 @10:47AM
(#7685985)
Most modern crypto is all but banned by Fedora's (really Redhat's) packaging policies. They only recently agreed to enable ECDSA in OpenSSL, and even then, only with NIST curves. There's a lot of other very shady overrides and limitations they impose on crytpo packages too, and any questions about them are invariably met with a chorus of "we are not at liberty to comment" from some lawyer type. NSA clearly have them by the balls.
[ Parent
| on HN ]
Re:Fedora 21 To Have DNSSEC Validation Enabled By Default
by jamespo on Friday May 02, 2014 @10:55AM
(#7686038)
More details please
Re:Fedora 21 To Have DNSSEC Validation Enabled By Default
by syjer on Friday May 02, 2014 @11:06AM
(#7686100)
https://bugzilla.redhat.com/show_bug.cgi?id=319901 is an interesting thread. And https://bugzilla.redhat.com/show_bug.cgi?id=1021898 .
My take is that RH is more afraid from patent trolling than some kind of shady government deal.
(edit: expanding why it's more against patent trolling: see their "Open Source Assurance" program: http://www.redhat.com/rhel/details/assurance/ , they provide indemnification, thus their legal department seems to be more on the cautious side)