From mboxrd@z Thu Jan 1 00:00:00 1970 Path: news.gmane.org!not-for-mail From: Eli Zaretskii Newsgroups: gmane.emacs.devel Subject: Re: NSM certificate prompt Date: Sun, 14 Dec 2014 18:04:33 +0200 Message-ID: <83k31u43qm.fsf@gnu.org> References: <83a92r625n.fsf@gnu.org> <87wq5vefiz.fsf@gmx.de> <83388j5wrs.fsf@gnu.org> <87mw6reaxu.fsf@gmx.de> <83y4qb4eeg.fsf@gnu.org> <83vblf4b2p.fsf@gnu.org> <87r3w3z60b.fsf@lifelogs.com> <83r3w348m8.fsf@gnu.org> <87iohfyprn.fsf@lifelogs.com> <83mw6q51x4.fsf@gnu.org> Reply-To: Eli Zaretskii NNTP-Posting-Host: plane.gmane.org X-Trace: ger.gmane.org 1418573122 28163 80.91.229.3 (14 Dec 2014 16:05:22 GMT) X-Complaints-To: usenet@ger.gmane.org NNTP-Posting-Date: Sun, 14 Dec 2014 16:05:22 +0000 (UTC) Cc: emacs-devel@gnu.org To: Lars Magne Ingebrigtsen Original-X-From: emacs-devel-bounces+ged-emacs-devel=m.gmane.org@gnu.org Sun Dec 14 17:05:15 2014 Return-path: Envelope-to: ged-emacs-devel@m.gmane.org Original-Received: from lists.gnu.org ([208.118.235.17]) by plane.gmane.org with esmtp (Exim 4.69) (envelope-from ) id 1Y0BfX-0000kf-3X for ged-emacs-devel@m.gmane.org; Sun, 14 Dec 2014 17:05:15 +0100 Original-Received: from localhost ([::1]:36368 helo=lists.gnu.org) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1Y0BfW-0007tL-Lx for ged-emacs-devel@m.gmane.org; Sun, 14 Dec 2014 11:05:14 -0500 Original-Received: from eggs.gnu.org ([2001:4830:134:3::10]:54457) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1Y0BfE-0007t8-Dd for emacs-devel@gnu.org; Sun, 14 Dec 2014 11:05:02 -0500 Original-Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1Y0Bf8-0000aV-HZ for emacs-devel@gnu.org; Sun, 14 Dec 2014 11:04:56 -0500 Original-Received: from mtaout22.012.net.il ([80.179.55.172]:48260) by eggs.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1Y0Bf8-0000YC-9G for emacs-devel@gnu.org; Sun, 14 Dec 2014 11:04:50 -0500 Original-Received: from conversion-daemon.a-mtaout22.012.net.il by a-mtaout22.012.net.il (HyperSendmail v2007.08) id <0NGK00I00XPFH600@a-mtaout22.012.net.il> for emacs-devel@gnu.org; Sun, 14 Dec 2014 18:04:49 +0200 (IST) Original-Received: from HOME-C4E4A596F7 ([87.69.4.28]) by a-mtaout22.012.net.il (HyperSendmail v2007.08) with ESMTPA id <0NGK00IZBY00HJ00@a-mtaout22.012.net.il>; Sun, 14 Dec 2014 18:04:49 +0200 (IST) In-reply-to: X-012-Sender: halo1@inter.net.il X-detected-operating-system: by eggs.gnu.org: Solaris 10 X-Received-From: 80.179.55.172 X-BeenThere: emacs-devel@gnu.org X-Mailman-Version: 2.1.14 Precedence: list List-Id: "Emacs development discussions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: emacs-devel-bounces+ged-emacs-devel=m.gmane.org@gnu.org Original-Sender: emacs-devel-bounces+ged-emacs-devel=m.gmane.org@gnu.org Xref: news.gmane.org gmane.emacs.devel:180089 Archived-At: > From: Lars Magne Ingebrigtsen > Cc: emacs-devel@gnu.org > Date: Sun, 14 Dec 2014 09:16:01 +0100 > > Eli Zaretskii writes: > > >> There's also the case that you may not want to use the host OS's trust > >> store for your own reasons. That should not be a struggle. Emacs is > >> not a all-in-one web browser, it's a platform. Don't take away the > >> users' choice of who they trust. > > > > No other browser I know of allows that. > > In Firefox, it's edit->preferences->advanced->certificates, and you can > remove any CAs you want there. Yes, I know. But that's one certificate at a time. The equivalent would be to add a certificate to a blacklist, or remove its file from the certificate directory. What I meant is a check-box saying "disregard all system-wide certificates" or some such.