From mboxrd@z Thu Jan 1 00:00:00 1970 Path: news.gmane.org!not-for-mail From: Lars Magne Ingebrigtsen Newsgroups: gmane.emacs.devel Subject: Re: Network security manager Date: Tue, 18 Nov 2014 16:29:30 +0100 Message-ID: References: <85a93pj1n5.fsf@stephe-leake.org> <87sihg7r73.fsf@alrua-karlstad.karlstad.toke.dk> <87a93oilxl.fsf@lifelogs.com> NNTP-Posting-Host: plane.gmane.org Mime-Version: 1.0 Content-Type: text/plain X-Trace: ger.gmane.org 1416324625 30244 80.91.229.3 (18 Nov 2014 15:30:25 GMT) X-Complaints-To: usenet@ger.gmane.org NNTP-Posting-Date: Tue, 18 Nov 2014 15:30:25 +0000 (UTC) To: emacs-devel@gnu.org Original-X-From: emacs-devel-bounces+ged-emacs-devel=m.gmane.org@gnu.org Tue Nov 18 16:30:19 2014 Return-path: Envelope-to: ged-emacs-devel@m.gmane.org Original-Received: from lists.gnu.org ([208.118.235.17]) by plane.gmane.org with esmtp (Exim 4.69) (envelope-from ) id 1XqkjP-0005GL-MP for ged-emacs-devel@m.gmane.org; Tue, 18 Nov 2014 16:30:15 +0100 Original-Received: from localhost ([::1]:53799 helo=lists.gnu.org) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1XqkjP-0003At-6o for ged-emacs-devel@m.gmane.org; Tue, 18 Nov 2014 10:30:15 -0500 Original-Received: from eggs.gnu.org ([2001:4830:134:3::10]:56236) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1Xqkj5-00035b-So for emacs-devel@gnu.org; Tue, 18 Nov 2014 10:30:01 -0500 Original-Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1Xqkj0-0005Ie-43 for emacs-devel@gnu.org; Tue, 18 Nov 2014 10:29:55 -0500 Original-Received: from hermes.netfonds.no ([80.91.224.195]:35487) by eggs.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1Xqkiz-0005IZ-Tr for emacs-devel@gnu.org; Tue, 18 Nov 2014 10:29:50 -0500 Original-Received: from cm-84.215.51.58.getinternet.no ([84.215.51.58] helo=stories.gnus.org) by hermes.netfonds.no with esmtpsa (TLS1.0:DHE_RSA_AES_128_CBC_SHA1:16) (Exim 4.72) (envelope-from ) id 1Xqkig-0007EQ-Hr for emacs-devel@gnu.org; Tue, 18 Nov 2014 16:29:30 +0100 Face: iVBORw0KGgoAAAANSUhEUgAAADAAAAAwBAMAAAClLOS0AAAAGFBMVEX079jy7dYLCQcFAwHX 0bsaGBX38tthXlP7+OhYAAACQElEQVQ4jWXTvW+rMBAA8LOUuqv9lIbd1GLnilhLQsIcwGKlEnLW Aon499+Zr4T3WBL55/Od7TOYytbcbr80TTMwAQDM0qTrlBuYSshFzvg7z5AOpJxjfgr8mibkeeZA cJK6hnfEWNQEnVLeFEFkR0DdVQd7fALUFMQKEgzbJ1ASC0yyHiOS4PLnBWi+lB5ejz6G5ZtS2QSM IgCEfCSdojwfK8gRGEv2eYehGhZgwhVFRwNecPRDVb4AJ7C7tCtdRDCBgHHn8JPlfvQtC3yF2ta7 hzEYf0OPSufzUmPER0vlYiBOqNScY1rrLNiRtld2Po3nLzBAk38VoS7UE5jLMoizup5RoXIhw1Qu nfwO70WY7NHHMccw71x8exhiKWTuRvUMTML+t0c0QwtHB8EMdOn7kkBj1RL46r4uBdDRJcX3U9zT eOApvQLtDavyVLpLvN7WCAF7GlBx5X6Cwwq0Q2YUFfrlDiWxjVHVApA5+CRouaWin+A5aE8YXax9 VxMIJgR4IbVB0mNMPUk5gjm5GMuKZI/XDVAfOMCkGNt6ATbmcFBhJP6FnZ87cilss8DYifeP/8Fd FIg3B3ixm+SuEye4Ehw3wN9HiLcgLGcEOkd9GV/UGlHzRp59c1amlXwDsE9TbVJjyhQ6nS/lUrMn KY2mD1Olt2Ho5gh6tpzXmR9RaZFsCPTzqVn3miHD8LBNDk1Pry/zMTrY/OXYOdCJVDvqhcCdiNJL J/JdEd0FtXsU8QWG8Xso+kNrVHoYDH1/ASgp5OSCuGzXAAAAAElFTkSuQmCC X-Now-Playing: Arto Lindsay's _Salt_: "De Lama =?iso-8859-1?Q?L=E2mina=22?= X-Hashcash: 1:23:141118:emacs-devel@gnu.org::AtfhkkfJh9McSC63:0000000000000000000000000000000000000000006YRx In-Reply-To: <87a93oilxl.fsf@lifelogs.com> (Ted Zlatanov's message of "Tue, 18 Nov 2014 10:10:46 -0500") User-Agent: Gnus/5.130012 (Ma Gnus v0.12) Emacs/25.0.50 (gnu/linux) X-MailScanner-ID: 1Xqkig-0007EQ-Hr MailScanner-NULL-Check: 1416929371.52802@w+GDUV2X+LSUtxJmP/0GNA X-detected-operating-system: by eggs.gnu.org: Genre and OS details not recognized. X-Received-From: 80.91.224.195 X-BeenThere: emacs-devel@gnu.org X-Mailman-Version: 2.1.14 Precedence: list List-Id: "Emacs development discussions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: emacs-devel-bounces+ged-emacs-devel=m.gmane.org@gnu.org Original-Sender: emacs-devel-bounces+ged-emacs-devel=m.gmane.org@gnu.org Xref: news.gmane.org gmane.emacs.devel:177563 Archived-At: Ted Zlatanov writes: > TH> incidentally, does Emacs check the cipher mode of the connection > TH> itself (I'm assuming this warning pertains to the certificate > TH> itself, not the connection encryption). > > No, after establishing the connection we don't check its properties. In > many cases, depending on the priority string, it could be very different > from what we expected IIUC, so this is neither simple nor very useful. Well, yes, that's exactly what we do. Open the connection, and then check the properties. >"? > Also, would you like to integrate your TOFU patch with the new nsm branch? The NSM does TOFU. No patch necessary. -- (domestic pets only, the antidote for overdose, milk.) bloggy blog: http://lars.ingebrigtsen.no