From mboxrd@z Thu Jan 1 00:00:00 1970 Path: news.gmane.org!.POSTED!not-for-mail From: Eli Zaretskii Newsgroups: gmane.emacs.devel Subject: Re: A couple of questions and concerns about Emacs network security Date: Sat, 07 Jul 2018 16:22:15 +0300 Message-ID: <83y3eni3js.fsf@gnu.org> References: <83po0iuhs7.fsf@gnu.org> <20180705113320.17e6b8ee@jabberwock.cb.piermont.com> <83po01mrvh.fsf@gnu.org> <87po00ahg9.fsf@gmail.com> <83601sn3yu.fsf@gnu.org> <87wou8itoy.fsf@gmx.net> <83po00leo5.fsf@gnu.org> <87sh4wiibi.fsf@gmx.net> <5B406894.2000204@gmx.at> <87d0vzfd5t.fsf@gmx.net> NNTP-Posting-Host: blaine.gmane.org X-Trace: blaine.gmane.org 1530969671 28871 195.159.176.226 (7 Jul 2018 13:21:11 GMT) X-Complaints-To: usenet@blaine.gmane.org NNTP-Posting-Date: Sat, 7 Jul 2018 13:21:11 +0000 (UTC) Cc: rudalics@gmx.at, rpluim@gmail.com, emacs-devel@gnu.org To: Stephen Berman Original-X-From: emacs-devel-bounces+ged-emacs-devel=m.gmane.org@gnu.org Sat Jul 07 15:21:07 2018 Return-path: Envelope-to: ged-emacs-devel@m.gmane.org Original-Received: from lists.gnu.org ([208.118.235.17]) by blaine.gmane.org with esmtp (Exim 4.84_2) (envelope-from ) id 1fbn97-0007Mo-U3 for ged-emacs-devel@m.gmane.org; Sat, 07 Jul 2018 15:21:06 +0200 Original-Received: from localhost ([::1]:33669 helo=lists.gnu.org) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1fbnBF-0002C4-3w for ged-emacs-devel@m.gmane.org; Sat, 07 Jul 2018 09:23:17 -0400 Original-Received: from eggs.gnu.org ([2001:4830:134:3::10]:34611) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1fbnAE-0002AT-Qx for emacs-devel@gnu.org; Sat, 07 Jul 2018 09:22:15 -0400 Original-Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1fbnAB-0006x1-Lx for emacs-devel@gnu.org; Sat, 07 Jul 2018 09:22:14 -0400 Original-Received: from fencepost.gnu.org ([2001:4830:134:3::e]:52900) by eggs.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1fbnAB-0006wd-IX; Sat, 07 Jul 2018 09:22:11 -0400 Original-Received: from [176.228.60.248] (port=4229 helo=home-c4e4a596f7) by fencepost.gnu.org with esmtpsa (TLS1.2:RSA_AES_256_CBC_SHA1:256) (Exim 4.82) (envelope-from ) id 1fbnAB-0004wk-0w; Sat, 07 Jul 2018 09:22:11 -0400 In-reply-to: <87d0vzfd5t.fsf@gmx.net> (message from Stephen Berman on Sat, 07 Jul 2018 14:22:54 +0200) X-detected-operating-system: by eggs.gnu.org: GNU/Linux 2.2.x-3.x [generic] X-Received-From: 2001:4830:134:3::e X-BeenThere: emacs-devel@gnu.org X-Mailman-Version: 2.1.21 Precedence: list List-Id: "Emacs development discussions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: emacs-devel-bounces+ged-emacs-devel=m.gmane.org@gnu.org Original-Sender: "Emacs-devel" Xref: news.gmane.org gmane.emacs.devel:227054 Archived-At: > From: Stephen Berman > Cc: Eli Zaretskii , rpluim@gmail.com, emacs-devel@gnu.org > Date: Sat, 07 Jul 2018 14:22:54 +0200 > > On Sat, 07 Jul 2018 09:15:32 +0200 martin rudalics wrote: > > >>> And the users who have made such a setting don't need the > >>> defaults to change anyway. > >> > >> No, but it's the new users who would benefit. > > > > Shouldn't new users face such changes with major releases only? > > Since this is a security-related change, it depends on the maintainers' > judgment of the risks (both of making the change and of not making it). When making these judgment calls, are we allowed to apply the same principle as you did, namely that the current situation "has been tested for at least five years", and therefore we can conclude that no urgent change is needed?