<?xml version="1.0"?>
<?xml-stylesheet type="text/xsl" href="/rss.xsl.xml"?>
<rss version="2.0" xmlns:dc="http://purl.org/dc/elements/1.1/">
<channel>
    <title>Changes in Makefile</title>
    <link>http://nxr.netbsd.org/rss/src/share/examples/racoon/roadwarrior/Makefile</link>
    <description></description>
    <language>en</language>
    <copyright>Copyright 2005</copyright>
    <generator>Java</generator>
    
<item>
    <title>Remove MKCRYPTO option.<br/><br/>Originally, MKCRYPTO was introduced because the United States<br/>classified cryptography as a munition and restricted its export.  The<br/>export controls were substantially relaxed fifteen years ago, and are<br/>essentially irrelevant for software with published source code.<br/><br/>In the intervening time, nobody bothered to remove the option after<br/>its motivation -- the US export restriction -- was eliminated.  I'm<br/>not aware of any other operating system that has a similar option; I<br/>expect it is mainly out of apathy for churn that we still have it.<br/>Today, cryptography is an essential part of modern computing -- you<br/>can't use the internet responsibly without cryptography.<br/><br/>The position of the TNF board of directors is that TNF makes no<br/>representation that MKCRYPTO=no satisfies any country's cryptography<br/>regulations.<br/><br/>My personal position is that the availability of cryptography is a<br/>basic human right; that any local laws restricting it to a privileged<br/>few are fundamentally immoral; and that it is wrong for developers to<br/>spend effort crippling cryptography to work around such laws.<br/><br/>As proposed on tech-crypto, tech-security, and tech-userlevel to no<br/>objections:<br/><br/>https://mail-index.netbsd.org/tech-crypto/2017/05/06/msg000719.html<br/>https://mail-index.netbsd.org/tech-security/2017/05/06/msg000928.html<br/>https://mail-index.netbsd.org/tech-userlevel/2017/05/06/msg010547.html<br/><br/>P.S.  Reviewing all the uses of MKCRYPTO in src revealed a lot of<br/>*bad* crypto that was conditional on it, e.g. DES in telnet...  That<br/>should probably be removed too, but on the grounds that it is bad,<br/>not on the grounds that it is (nominally) crypto.</title>
    <description>/src/share/examples/racoon/roadwarrior/Makefile - 1.3</description>
    <pubDate>Sun May 21 15:28:41 UTC 2017</pubDate>
    <dc:creator>riastradh</dc:creator>
</item>

<item>
    <title>don't install crypto files with MKCRYPTO=no.  with these changes, a<br/>MKCRYPTO=no build completes.</title>
    <description>/src/share/examples/racoon/roadwarrior/Makefile - 1.2</description>
    <pubDate>Mon Jun 26 19:50:57 UTC 2006</pubDate>
    <dc:creator>mrg</dc:creator>
</item>

<item>
    <title>Switch to ipsec-tools for libipsec, setkey, and racoon.  From<br/>Emmanuel Dreyfus, with some small changes by me.</title>
    <description>/src/share/examples/racoon/roadwarrior/Makefile - 1.1</description>
    <pubDate>Sat Feb 19 16:55:05 UTC 2005</pubDate>
    <dc:creator>thorpej</dc:creator>
</item>
</channel></rss>

