From mboxrd@z Thu Jan 1 00:00:00 1970 Path: news.gmane.org!not-for-mail From: Eli Zaretskii Newsgroups: gmane.emacs.devel Subject: Re: GnuTLS/TLS proposals for after the release Date: Wed, 13 Jul 2016 17:26:42 +0300 Message-ID: <83lh15aa1p.fsf@gnu.org> References: <87furnhj3g.fsf@lifelogs.com> <8737nngdnr.fsf@lifelogs.com> <87wpkr6k10.fsf@lifelogs.com> Reply-To: Eli Zaretskii NNTP-Posting-Host: plane.gmane.org X-Trace: ger.gmane.org 1468420073 13730 80.91.229.3 (13 Jul 2016 14:27:53 GMT) X-Complaints-To: usenet@ger.gmane.org NNTP-Posting-Date: Wed, 13 Jul 2016 14:27:53 +0000 (UTC) Cc: emacs-devel@gnu.org To: John Wiegley Original-X-From: emacs-devel-bounces+ged-emacs-devel=m.gmane.org@gnu.org Wed Jul 13 16:27:46 2016 Return-path: Envelope-to: ged-emacs-devel@m.gmane.org Original-Received: from lists.gnu.org ([208.118.235.17]) by plane.gmane.org with esmtp (Exim 4.69) (envelope-from ) id 1bNL8Z-0008Fq-Sl for ged-emacs-devel@m.gmane.org; Wed, 13 Jul 2016 16:27:44 +0200 Original-Received: from localhost ([::1]:48036 helo=lists.gnu.org) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1bNL8Z-0007dc-48 for ged-emacs-devel@m.gmane.org; Wed, 13 Jul 2016 10:27:43 -0400 Original-Received: from eggs.gnu.org ([2001:4830:134:3::10]:44676) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1bNL7t-0007cm-QZ for emacs-devel@gnu.org; Wed, 13 Jul 2016 10:27:02 -0400 Original-Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1bNL7p-0001sc-Li for emacs-devel@gnu.org; Wed, 13 Jul 2016 10:27:01 -0400 Original-Received: from fencepost.gnu.org ([2001:4830:134:3::e]:55204) by eggs.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1bNL7p-0001sY-J8; Wed, 13 Jul 2016 10:26:57 -0400 Original-Received: from 84.94.185.246.cable.012.net.il ([84.94.185.246]:3827 helo=home-c4e4a596f7) by fencepost.gnu.org with esmtpsa (TLS1.2:RSA_AES_128_CBC_SHA1:128) (Exim 4.82) (envelope-from ) id 1bNL7o-0004nl-Op; Wed, 13 Jul 2016 10:26:57 -0400 In-reply-to: (message from John Wiegley on Tue, 12 Jul 2016 15:03:31 -0700) X-detected-operating-system: by eggs.gnu.org: GNU/Linux 2.2.x-3.x [generic] X-Received-From: 2001:4830:134:3::e X-BeenThere: emacs-devel@gnu.org X-Mailman-Version: 2.1.21 Precedence: list List-Id: "Emacs development discussions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: emacs-devel-bounces+ged-emacs-devel=m.gmane.org@gnu.org Original-Sender: "Emacs-devel" Xref: news.gmane.org gmane.emacs.devel:205629 Archived-At: > From: John Wiegley > Cc: Eli Zaretskii > Date: Tue, 12 Jul 2016 15:03:31 -0700 > > >>>>> "TZ" == Ted Zlatanov writes: > > TZ> We seem to have aceptance of this for the next release. > TZ> Should we enact (2) now, before the upcoming RC? > > TZ> I understand the risk to the release, but OTOH there's a significant risk > TZ> to our users from shipping with an insecure setting by default. > > I think it's far too late for that. Eli? Yes, I agree: far too late. Changing that is likely to trigger non-trivial problems, and we would like to make an RC in a few days.