Bug#828475: openssh: Please migrate to openssl1.1 in Buster
On Mon, Oct 16, 2017 at 09:40:44PM -0700, Russ Allbery wrote:
> I suspect Colin understandably regrets even taking the GSSAPI patch (as
> much as it has made things hugely better for the Kerberos community and
> has allowed Debian to drop other Kerberos software that was a collection
> of security vulnerabilities waiting to happen).
Yes and no. I think it was the right decision in macro terms, although
I've certainly cursed at it from time to time over the years! There was
a very high bar to reach for that decision to be sensible, though.
--
Colin Watson [cjwatson@debian.org]
Reply to: