AES encrypted passwords

[freeradius-users at latter.org]

On 30/09/16 14:47, Alan DeKok wrote:
> Your response complaining about security professionals concentrating
> on the wrong thing is *entirely* inappropriate.

I think my point about sometimes things being Good Enough is valid.

Thanks to some helpful replies it is now abundantly clear that not
verifying the certificate is not Good Enough.

> I'll say it again: Amateurs SHOULD NOT be designing security systems.
> You, and your managers, and the marketing people, are security
> amateurs.

I didn't design this.

> Listen to the experts, or ignore their advice.  It's up to you.  But
> do *not* respond by belittling the experts.

I am sorry if you felt that I was belittling the experts.  Or that I
was arguing.

> Honestly, I have no idea what the heck is going through peoples minds
> when they ask questions, and thenargue with the answers.  It's

/s/argue with the answers/seek further clarification/

> Stop it.

I think I'm out of here for now.