* bug#27823: 26.0.50; nsm in paranoid mode always saves fingerprint in session-only mode
@ 2017-07-25 14:57 Robert Pluim
2019-07-15 18:32 ` Lars Ingebrigtsen
0 siblings, 1 reply; 2+ messages in thread
From: Robert Pluim @ 2017-07-25 14:57 UTC (permalink / raw)
To: 27823
; This is with the HEAD of master
; Make sure that network-security.data doesn't contain the fingerprint
for lists.gnu.org, which for me is sha1:e9248aef3ac9bcbba8d57fa471a07073adb88cbd
emacs -Q
(setq network-security-level 'paranoid)
M-x eww RET
https://lists.gnu.org RET
; Answer 'session only' to the prompt
C-x C-c
emacs -Q
(setq network-security-level 'paranoid)
M-x eww RET
https://lists.gnu.org RET
; Be very surprised that you're not reprompted to accept the
certificate, and see that its fingerprint has been added to
network-security.data
If I've said 'session only', I expect emacs to save nothing about the
connection at all.
Regards
Robert
In GNU Emacs 26.0.50 (build 4, x86_64-pc-linux-gnu, GTK+ Version 3.18.9)
of 2017-07-25 built on rpluim-ubuntu
Repository revision: 4e619aaa163f771c0ce271671c2b6fde09f8ba81
Windowing system distributor 'The X.Org Foundation', version 11.0.11804000
System Description: KDE neon LTS User Edition 5.8
^ permalink raw reply [flat|nested] 2+ messages in thread
* bug#27823: 26.0.50; nsm in paranoid mode always saves fingerprint in session-only mode
2017-07-25 14:57 bug#27823: 26.0.50; nsm in paranoid mode always saves fingerprint in session-only mode Robert Pluim
@ 2019-07-15 18:32 ` Lars Ingebrigtsen
0 siblings, 0 replies; 2+ messages in thread
From: Lars Ingebrigtsen @ 2019-07-15 18:32 UTC (permalink / raw)
To: Robert Pluim; +Cc: 27823
Robert Pluim <rpluim@gmail.com> writes:
> emacs -Q
> (setq network-security-level 'paranoid)
> M-x eww RET
> https://lists.gnu.org RET
> ; Answer 'session only' to the prompt
> C-x C-c
> emacs -Q
> (setq network-security-level 'paranoid)
> M-x eww RET
> https://lists.gnu.org RET
>
> ; Be very surprised that you're not reprompted to accept the
> certificate, and see that its fingerprint has been added to
> network-security.data
>
> If I've said 'session only', I expect emacs to save nothing about the
> connection at all.
Yup. Looks like the error was in the NSM saving the fingerprint once
more after it had already been saved in the correct temporary storage.
This should now be fixed on the trunk.
--
(domestic pets only, the antidote for overdose, milk.)
bloggy blog: http://lars.ingebrigtsen.no
^ permalink raw reply [flat|nested] 2+ messages in thread
end of thread, other threads:[~2019-07-15 18:32 UTC | newest]
Thread overview: 2+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2017-07-25 14:57 bug#27823: 26.0.50; nsm in paranoid mode always saves fingerprint in session-only mode Robert Pluim
2019-07-15 18:32 ` Lars Ingebrigtsen
Code repositories for project(s) associated with this public inbox
https://git.savannah.gnu.org/cgit/emacs.git
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for read-only IMAP folder(s) and NNTP newsgroup(s).