From mboxrd@z Thu Jan 1 00:00:00 1970 Path: news.gmane.org!not-for-mail From: Lars Ingebrigtsen Newsgroups: gmane.emacs.bugs Subject: bug#19284: 25.0.50; tls.el uses option --insecure Date: Tue, 29 Dec 2015 14:29:46 +0100 Message-ID: <878u4didrp.fsf@gnus.org> References: <86iohpq3w2.fsf@informationelle-selbstbestimmung-im-internet.de> <87k2o0q5by.fsf@gnus.org> <87k2ny1b8a.fsf@lifelogs.com> NNTP-Posting-Host: plane.gmane.org Mime-Version: 1.0 Content-Type: text/plain X-Trace: ger.gmane.org 1451395884 18734 80.91.229.3 (29 Dec 2015 13:31:24 GMT) X-Complaints-To: usenet@ger.gmane.org NNTP-Posting-Date: Tue, 29 Dec 2015 13:31:24 +0000 (UTC) Cc: Jens Lechtenboerger To: 19284@debbugs.gnu.org Original-X-From: bug-gnu-emacs-bounces+geb-bug-gnu-emacs=m.gmane.org@gnu.org Tue Dec 29 14:31:13 2015 Return-path: Envelope-to: geb-bug-gnu-emacs@m.gmane.org Original-Received: from lists.gnu.org ([208.118.235.17]) by plane.gmane.org with esmtp (Exim 4.69) (envelope-from ) id 1aDuMq-0005gT-Sn for geb-bug-gnu-emacs@m.gmane.org; Tue, 29 Dec 2015 14:31:13 +0100 Original-Received: from localhost ([::1]:48460 helo=lists.gnu.org) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1aDuMp-0002fP-TR for geb-bug-gnu-emacs@m.gmane.org; Tue, 29 Dec 2015 08:31:11 -0500 Original-Received: from eggs.gnu.org ([2001:4830:134:3::10]:40410) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1aDuMk-0002f1-9c for bug-gnu-emacs@gnu.org; Tue, 29 Dec 2015 08:31:08 -0500 Original-Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1aDuMg-0002bH-LH for bug-gnu-emacs@gnu.org; Tue, 29 Dec 2015 08:31:06 -0500 Original-Received: from debbugs.gnu.org ([208.118.235.43]:39829) by eggs.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1aDuMg-0002bB-I9 for bug-gnu-emacs@gnu.org; Tue, 29 Dec 2015 08:31:02 -0500 Original-Received: from Debian-debbugs by debbugs.gnu.org with local (Exim 4.84) (envelope-from ) id 1aDuMg-00087C-Bx for bug-gnu-emacs@gnu.org; Tue, 29 Dec 2015 08:31:02 -0500 X-Loop: help-debbugs@gnu.org Resent-From: Lars Ingebrigtsen Original-Sender: "Debbugs-submit" Resent-CC: bug-gnu-emacs@gnu.org Resent-Date: Tue, 29 Dec 2015 13:31:02 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 19284 X-GNU-PR-Package: emacs X-GNU-PR-Keywords: security Original-Received: via spool by 19284-submit@debbugs.gnu.org id=B19284.145139581728211 (code B ref 19284); Tue, 29 Dec 2015 13:31:02 +0000 Original-Received: (at 19284) by debbugs.gnu.org; 29 Dec 2015 13:30:17 +0000 Original-Received: from localhost ([127.0.0.1]:47431 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84) (envelope-from ) id 1aDuLv-0007Io-St for submit@debbugs.gnu.org; Tue, 29 Dec 2015 08:30:17 -0500 Original-Received: from hermes.netfonds.no ([80.91.224.195]:51729) by debbugs.gnu.org with esmtp (Exim 4.84) (envelope-from ) id 1aDuLr-0007DU-Fe for 19284@debbugs.gnu.org; Tue, 29 Dec 2015 08:30:15 -0500 Original-Received: from 2.150.58.24.tmi.telenormobil.no ([2.150.58.24] helo=mouse) by hermes.netfonds.no with esmtpsa (TLS1.0:RSA_AES_128_CBC_SHA1:16) (Exim 4.72) (envelope-from ) id 1aDuLT-0005Ew-Dz; Tue, 29 Dec 2015 14:29:47 +0100 In-Reply-To: <87k2ny1b8a.fsf@lifelogs.com> (Ted Zlatanov's message of "Mon, 28 Dec 2015 17:04:21 -0500") User-Agent: Gnus/5.130014 (Ma Gnus v0.14) Emacs/25.1.50 (gnu/linux) X-MailScanner-ID: 1aDuLT-0005Ew-Dz MailScanner-NULL-Check: 1452000588.25147@21SaPcouKO3sjo/JQGIKLA X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list X-detected-operating-system: by eggs.gnu.org: GNU/Linux 2.2.x-3.x [generic] X-Received-From: 208.118.235.43 X-BeenThere: bug-gnu-emacs@gnu.org List-Id: "Bug reports for GNU Emacs, the Swiss army knife of text editors" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: bug-gnu-emacs-bounces+geb-bug-gnu-emacs=m.gmane.org@gnu.org Original-Sender: bug-gnu-emacs-bounces+geb-bug-gnu-emacs=m.gmane.org@gnu.org Xref: news.gmane.org gmane.emacs.bugs:110955 Archived-At: Ted Zlatanov writes: > On Sat, 26 Dec 2015 22:15:45 +0100 Lars Ingebrigtsen wrote: > > LI> As Stefan said in a different report -- perhaps we should just require > LI> Emacs with built-in TLS support if you want to use TLS. That would > LI> essentially mean that we should just remove tls.el and starttls.el. > > LI> Alternatively we could, in Emacs 25.1, just remove the --insecure > LI> settings and let people who try to connect to their IMAP server just > LI> fail somewhat mysteriously (it's very common to have self-signed certs > LI> for IMAP). > > I am in favor of either option and I think the first is cleaner. > > There will be a small but vocal group that wants to use the external > tunnel utility. I think the benefit to the rest of the users will be > worth it, and that group can have a ELPA package to support them. I'd rather do the first, too, but perhaps we should wait a bit. I'll just remove the --insecure for now. -- (domestic pets only, the antidote for overdose, milk.) bloggy blog: http://lars.ingebrigtsen.no