It should be retroactively removed the spec, and all implementations should remove the "none" algorithm. It is a huge security hole.

Yea, and it was a big issue years ago. I can't believe there is any modern implementation that has it.... or another way to put this is, how old is this damned implementation they are using?

[dead]