Changes to this cryptography policy include making sure that the insecure configuration is not enabled by default. This change was announced here after the meeting of an OpenSSL Management Committee (OMC)