11 | | * '''WAIT''': We believe that the cert update process will roll keys, so all (active-ish) users should have updated keys by ~September even without any additional work. |
12 | | * '''OK''': AFS servers are hard to roll, but mostly don't count because of krb5_allow_weak_crypto.html (see comment:3). |
| 11 | * '''FIXED''': We believe that the cert update process will roll keys, so all (active-ish) users should now have updated keys. |
| 12 | * '''FIXED''': AFS servers now use a hack to use AES keys, plus mostly don't count because of krb5_allow_weak_crypto.html (see comment:3). |