Dear colleagues,

According to January's updated migration plan to remove all MD5 hashed 
passwords from the RIPE database in 2025 :
https://mailman.ripe.net/archives/list/[email protected]/thread/NGCRQWJPF7MT24V2MVJWIHVKHLEPMBOQ/

And to update my previous mail from 31st March:
https://mailman.ripe.net/archives/list/[email protected]/thread/4QNPE24MIDFRSG4UHYAK4GS4BWCYZANS/

In Q2 2025, the RIPE NCC plans to remove all MD5 hashed passwords that have not 
been used for authentication since 1st January 2024, to reduce the risk of 
having so many MD5 hashes in the database in case of a data breach. We found 
this will affect approximately 17,000 out of 62,000 maintainers.

We have now split these maintainers into four batches and will notify the first 
batch by email *tomorrow* 11th June. We will send a reminder email for this 
first batch in one week (18th June), and then finally remove any inactive 
password hashes for the first batch in two weeks (25th June). 

We will wait one week before starting on the next batch of maintainers, and 
also give each batch two weeks notice. This should be enough time to suffiently 
notify affected maintainers, and to complete the process by mid-July, so we can 
begin to notify maintainers who are *actively* using password hashes (giving 
them 6 months notice before support for passwords is removed by end 2025).

If maintainers need more time, or if we have many support requests, then we can 
adjust the timeline accordingly.

Please let us know your comments and/or questions regarding this planned change.

Regards
Ed Shryane
RIPE NCC

-----
To unsubscribe from this mailing list or change your subscription options, 
please visit: https://mailman.ripe.net/mailman3/lists/db-wg.ripe.net/
As we have migrated to Mailman 3, you will need to create an account with the 
email matching your subscription before you can change your settings. 
More details at: https://www.ripe.net/membership/mail/mailman-3-migration/

Reply via email to