System - wide crypto policies what and why
summary
System-wide crypto policies centralize TLS/cipher/key-length/version settings across Fedora/RHEL components and ship as curated levels: legacy, default, next, future, FIPS. Back ends covered include OpenSSL GnuTLS NSS Java plus Kerberos, bind, OpenSSH and Libreswan. A demo shows update-crypto-policies set legacy enabling older TLS for compatibility while SSLv2/SSLv3 stay removed; custom policies are possible but fragile, data-at-rest and third-party libs aren’t controlled, and recommendation is to keep default unless compatibility requires otherwise.
AI-written summary · about
chapters (7)
- 0:00Start
- 1:05CRYPTOGRAPHY AND TIME
- 4:11PERSPECTIVES
- 9:20DETAILS
- 13:51CRYPTO POLICIES
- 14:46FUTURE
- 15:57RESOURCES
related talks
01h 09mLife beyond FIPS 140-3: identity tales
36mSecurity compliance: A global perspective
29mAre Our Systems Using up-to-Date Cryptography?
34m"The Cryptography State of the Union"
29m[DISCUSSION] Your cryptography will be broken, prepare yourself now!
29mThe Go Cryptography State of the Union
38mA Quantum Computing Talk Without Qubits
54mState of authentication and identity in Fedora