From mboxrd@z Thu Jan 1 00:00:00 1970 Path: news.gmane.org!not-for-mail From: Florian Weimer Newsgroups: gmane.emacs.devel Subject: Re: Bug#766395: emacs/gnus: Uses s_client to for SSL. Date: Thu, 23 Oct 2014 21:50:07 +0200 Message-ID: <87wq7qva4w.fsf@mid.deneb.enyo.de> References: <20141022193441.GA11872@roeckx.be> <87zjcnj2k6.fsf@trouble.defaultvalue.org> <87mw8mzmxj.fsf@mid.deneb.enyo.de> <20141023143702.3897e618@jabberwock.cb.piermont.com> <8761fazkx7.fsf@mid.deneb.enyo.de> <20141023145721.12ed0820@jabberwock.cb.piermont.com> <87vbnay5lf.fsf@mid.deneb.enyo.de> <20141023154223.45f2c9eb@jabberwock.cb.piermont.com> NNTP-Posting-Host: plane.gmane.org Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii X-Trace: ger.gmane.org 1414093859 26696 80.91.229.3 (23 Oct 2014 19:50:59 GMT) X-Complaints-To: usenet@ger.gmane.org NNTP-Posting-Date: Thu, 23 Oct 2014 19:50:59 +0000 (UTC) Cc: emacs-devel@gnu.org, rms@gnu.org, Rob Browning , kurt@roeckx.be To: "Perry E. Metzger" Original-X-From: emacs-devel-bounces+ged-emacs-devel=m.gmane.org@gnu.org Thu Oct 23 21:50:51 2014 Return-path: Envelope-to: ged-emacs-devel@m.gmane.org Original-Received: from lists.gnu.org ([208.118.235.17]) by plane.gmane.org with esmtp (Exim 4.69) (envelope-from ) id 1XhOPJ-0007ll-0K for ged-emacs-devel@m.gmane.org; Thu, 23 Oct 2014 21:50:49 +0200 Original-Received: from localhost ([::1]:43234 helo=lists.gnu.org) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1XhOPI-0007x7-L3 for ged-emacs-devel@m.gmane.org; Thu, 23 Oct 2014 15:50:48 -0400 Original-Received: from eggs.gnu.org ([2001:4830:134:3::10]:41473) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1XhOOt-0007fQ-2L for emacs-devel@gnu.org; Thu, 23 Oct 2014 15:50:29 -0400 Original-Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1XhOOm-0004K7-UJ for emacs-devel@gnu.org; Thu, 23 Oct 2014 15:50:23 -0400 Original-Received: from albireo.enyo.de ([46.237.207.196]:35050) by eggs.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1XhOOg-0003yx-6a; Thu, 23 Oct 2014 15:50:10 -0400 Original-Received: from [172.17.203.2] (helo=deneb.enyo.de) by albireo.enyo.de with esmtps (TLS1.2:DHE_RSA_AES_128_CBC_SHA1:128) id 1XhOOd-0005IP-7l; Thu, 23 Oct 2014 21:50:07 +0200 Original-Received: from fw by deneb.enyo.de with local (Exim 4.80) (envelope-from ) id 1XhOOd-0007mV-0x; Thu, 23 Oct 2014 21:50:07 +0200 In-Reply-To: <20141023154223.45f2c9eb@jabberwock.cb.piermont.com> (Perry E. Metzger's message of "Thu, 23 Oct 2014 15:42:23 -0400") X-detected-operating-system: by eggs.gnu.org: GNU/Linux 3.x [generic] [fuzzy] X-Received-From: 46.237.207.196 X-BeenThere: emacs-devel@gnu.org X-Mailman-Version: 2.1.14 Precedence: list List-Id: "Emacs development discussions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: emacs-devel-bounces+ged-emacs-devel=m.gmane.org@gnu.org Original-Sender: emacs-devel-bounces+ged-emacs-devel=m.gmane.org@gnu.org Xref: news.gmane.org gmane.emacs.devel:175755 Archived-At: * Perry E. Metzger: > The intelligence agencies thank you for your inadvertent assistance > in assuring that various kinds of downgrade, padding and other attacks > will remain feasible for years to come. Giving incorrect advice, like you do, does not make the Internet a safer place, either. I don't think it makes sense to continue the discussion. Again, if you are looking for something useful to do, rally against RC4, not SSL 3.0.