Quoting Kevin Kofler via devel (2022-06-30 13:16:55)
Clemens Lang wrote:
> I hope you’re not suggesting we keep the defaults insecure because there
> are some institutions out there that don’t support modern standards.
Sorry, but I am.
The defaults need to work out there in the real world.
Your model lacks the driver for deprecating anything for good,
in neither defaults nor the real world.
If legacy standards are still widespread,
they need to be supported out of the box,
Yes.
without having to jump through hoops.
No, or nothing ever moves on, squarely because
Users want to be able to connect to their WPA* WiFi networks,
view their HTTPS websites, etc.
They do not care whether those use the latest,
most secure versions of the standard or not.