Company regulations require all communication to be encrypted, but they don't sp...

user5994461 · on Aug 7, 2017

Actually PCI DSS does.

Funny enough, it tried to deprecate old TLS versions already but it was so widely used that they had to move back the date.

https://blog.pcisecuritystandards.org/migrating-from-ssl-and...

https://support.cloudflare.com/hc/en-us/articles/205043158-P...

madez · on Aug 7, 2017

Then the regulations need to have a mechanism to be updated in the case of new knowledge. If the regulations have no process to be updated then that is a more fundamental problem to solve.

After all, Debian is set to give the process of change 2 years. That is plenty of time for updating the regulation and processes.

majewsky · on Aug 7, 2017

> 2 years

Also, you can stay on oldstable for a while if you absolutely cannot upgrade.

michaelt · on Aug 7, 2017

Any joker can start a company and declare any regulation they like. I could require that all software be written in COBOL by moustachioed developers standing on one foot.

If I did that, I think Debian would not change their software to meet my bizarre "company regulations"