On Sun, Mar 06, 2011 at 02:36:58AM +0100, Milan Broz wrote: > IMHO that message should not be there at all. If application relies on > it, then it must fail completely, warning is not enough. Indeed - that should be the long-term change - to fail instead of warn, and let the application decide whether to retry less-securely. Alasdair