Re: ssl security desaster

[Russ Allbery <rra@xxxxxxxxxx>]

Martin Uecker <muecker@xxxxxxx> writes:

> In this case, the security advisory should clearly be updated. And all
> advise about searching for weak keys should be removed as well, because
> it leads to false sense of security. In fact, *all* keys used on Debian
> machines should be considered compromised.

All *DSA* keys.  RSA keys do not have the same problem, as I understand
it.

-- 
Russ Allbery (rra@xxxxxxxxxx)               <http://www.eyrie.org/~eagle/>


-- 
To UNSUBSCRIBE, email to debian-devel-REQUEST@xxxxxxxxxxxxxxxx
with a subject of "unsubscribe". Trouble? Contact listmaster@xxxxxxxxxxxxxxxx