On Fri, 2019-04-19 at 14:54 -0400, Daniel Lenski wrote: > On Fri, Apr 19, 2019 at 2:22 PM Nikos Mavrogiannopoulos > <[email protected]> wrote: > > Isn't ikev1 kind of being phased out? > > In theory, yes. > But so are IPv4 and TLS v1.0… and I wouldn't hold my breath on any of > these :-)
I wouldn't do that for TLS 1.0 or 1.1 they seem to be phased out already in new products (RHEL8 which I was involved comes without them by default in its beta - as well as IKEv1), and there is kind of industry wide push for that: https://tools.ietf.org/html/draft-ietf-tls-oldversions-deprecate-03 For IKEv1 the story may be quite different but as the current trend is to phase out old stuff (something that was unacceptable 10 years ago), I wouldn't bet any money on it :) regards, Nikos _______________________________________________ openconnect-devel mailing list [email protected] http://lists.infradead.org/mailman/listinfo/openconnect-devel
