>>>>> "TZ" == Ted Zlatanov writes: TZ> We seem to have aceptance of this for the next release. TZ> Should we enact (2) now, before the upcoming RC? TZ> I understand the risk to the release, but OTOH there's a significant risk TZ> to our users from shipping with an insecure setting by default. I think it's far too late for that. Eli? -- John Wiegley GPG fingerprint = 4710 CF98 AF9B 327B B80F http://newartisans.com 60E1 46C4 BD1A 7AC1 4BA2