Changes between Version 6 and Version 7 of Ticket #1308


Ignore:
Timestamp:
03/31/13 23:33:56 (11 years ago)
Author:
adehnert
Comment:

Legend:

Unmodified
Added
Removed
Modified

  • Ticket #1308 – Description

    v6 v7  
    99 
    1010Key rolling status: 
    11  * We believe that the cert update process will roll keys, so all (active-ish) users should have updated keys by ~September even without any additional work. 
    12  * AFS servers are hard to roll, but mostly don't count because of krb5_allow_weak_crypto.html (see comment:3). 
    13  * Except for AFS (above), Server Operations' keys have all be updated (see comment:4). 
    14  * The PO servers (IMAP) have new keys 
    15  * SIPB services are generally rolled (contacting the maintainers is probably reasonable for anything that isn't, but we think that's done) 
     11 * '''WAIT''': We believe that the cert update process will roll keys, so all (active-ish) users should have updated keys by ~September even without any additional work. 
     12 * '''OK''': AFS servers are hard to roll, but mostly don't count because of krb5_allow_weak_crypto.html (see comment:3). 
     13 * '''FIXED''': Except for AFS (above), Server Operations' keys have all be updated (see comment:4). 
     14 * '''FIXED''': The PO servers (IMAP) have new keys 
     15 * '''FIXED''': SIPB services are generally rolled (contacting the maintainers is probably reasonable for anything that isn't, but we think that's done) 
    1616 * Presumably user outreach is required to get other application servers to roll their keys.