> NSS needs one environment variable that says
> "In all cases where a new behavior might break compatibility,
> choose the old behavior"
I think that's a bit too broad. Who wouldn't want compat, after all?
I'd rather make one "NSS_I_WANT_TO_BE_INSECURE". If set to "YES", you'd allow MD2 for verification. I can't see why anyone would want that, though.
> NSS needs one environment variable that says
> "In all cases where a new behavior might break compatibility,
> choose the old behavior"
I think that's a bit too broad. Who wouldn't want compat, after all? WANT_TO_ BE_INSECURE" . If set to "YES", you'd allow MD2 for verification. I can't see why anyone would want that, though.
I'd rather make one "NSS_I_