Enforcement of a system-wide crypto policy
Channel: DebConf Videos
Date: 2017-12-03

by Nikos Mavrogiannopoulos

At: DebConf15
https://summit.debconf.org/debconf15/meeting/252/enforcement-of-a-system-wide-crypto-policies/
https://debconf15.debconf.org/

Currently each and every shipped application in distributions enforces its own policy on the allowed cryptographic algorithms/protocols. While for some this is a desirable property, for most unmanaged applications like wget, curl, and similar, it prevents enforcing a consistent security level. The purpose of this talk is to describe the approach we've taken in Fedora to counter the issue, and enforce a system-wide policies, discuss the current outcome, lessons learned, and invite Debian maintainers to participate.

Room: Heidelberg
Scheduled start: 2015-08-16 15:00:00