Comment 50 for bug 312536

Revision history for this message
In , Ben-bucksch (ben-bucksch) wrote :

> NSS needs one environment variable that says
> "In all cases where a new behavior might break compatibility,
> choose the old behavior"

I think that's a bit too broad. Who wouldn't want compat, after all?
I'd rather make one "NSS_I_WANT_TO_BE_INSECURE". If set to "YES", you'd allow MD2 for verification. I can't see why anyone would want that, though.