News for hackers. Stuff that matters.
Re:Fedora 21 To Have DNSSEC Validation Enabled By Default by jg03 on Friday May 02, 2014 @10:47AM (#7685985)
Most modern crypto is all but banned by Fedora's (really Redhat's) packaging policies. They only recently agreed to enable ECDSA in OpenSSL, and even then, only with NIST curves. There's a lot of other very shady overrides and limitations they impose on crytpo packages too, and any questions about them are invariably met with a chorus of "we are not at liberty to comment" from some lawyer type. NSA clearly have them by the balls.
Re:Fedora 21 To Have DNSSEC Validation Enabled By Default by jamespo on Friday May 02, 2014 @10:55AM (#7686038)
More details please
Re:Fedora 21 To Have DNSSEC Validation Enabled By Default by syjer on Friday May 02, 2014 @11:06AM (#7686100)
https://bugzilla.redhat.com/show_bug.cgi?id=319901 is an interesting thread. And https://bugzilla.redhat.com/show_bug.cgi?id=1021898 .

My take is that RH is more afraid from patent trolling than some kind of shady government deal.

(edit: expanding why it's more against patent trolling: see their "Open Source Assurance" program: http://www.redhat.com/rhel/details/assurance/ , they provide indemnification, thus their legal department seems to be more on the cautious side)

Re:Fedora 21 To Have DNSSEC Validation Enabled By Default by 0x0 on Friday May 02, 2014 @11:17AM (#7686177)
Wow, feels like it's the 90s again with PGP and 40bit export browsers!