all messages for Emacs-related lists mirrored at yhetil.org
 help / color / mirror / code / Atom feed
From: Lars Ingebrigtsen <larsi@gnus.org>
To: Stefan Monnier <monnier@iro.umontreal.ca>
Cc: emacs-devel@gnu.org
Subject: Re: Deprecate TLS1.0 support in emacs
Date: Thu, 03 Aug 2017 13:48:20 +0200	[thread overview]
Message-ID: <873798j2ij.fsf@mouse> (raw)
In-Reply-To: <jwvini7cgvq.fsf-monnier+gmane.emacs.devel@gnu.org> (Stefan Monnier's message of "Tue, 01 Aug 2017 13:56:02 -0400")

Stefan Monnier <monnier@iro.umontreal.ca> writes:

>> Yes, I agree.  eww, for instance, could remove the green URL when using
>> TLS 1.0, etc.  But the proposed NSM warning (which would make the user
>> answer "y" to a direct question about the TLS-ness) is too heavy, in my
>> opinion.
>
> Could we replace the prompt with a simple message (and if the message
> gets overwritten too soon, maybe adding a short delay)?

Hm...  that sounds like a nice compromise.  However, there might be a
lot of these messages if, for instance, the user visits a web page where
all the images are being served over a TLS connection we're warning
about.

Or perhaps warnings in those instances should be inhibited?

Anyway, the NSM layer could be easily extended to add certain
notifications to each security level.  So you'd get something like

"Connection to fsf.org:443 is less secure because of an old TLS version"

or along those lines flashing in the minibuffer...

-- 
(domestic pets only, the antidote for overdose, milk.)
   bloggy blog: http://lars.ingebrigtsen.no



  reply	other threads:[~2017-08-03 11:48 UTC|newest]

Thread overview: 48+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2017-07-12 13:03 Deprecate TLS1.0 support in emacs Robert Pluim
2017-07-12 13:48 ` Lars Ingebrigtsen
2017-07-12 14:30   ` Robert Pluim
2017-07-12 14:36     ` Andreas Schwab
2017-07-12 14:39       ` Robert Pluim
2017-07-12 14:55         ` Andreas Schwab
2017-07-12 15:59           ` Robert Pluim
2017-07-12 14:44     ` Lars Ingebrigtsen
2017-07-12 16:10       ` Robert Pluim
2017-07-12 19:05         ` Lars Ingebrigtsen
2017-07-13  8:45           ` Robert Pluim
2017-07-13 12:25           ` Richard Stallman
2017-07-13 13:29             ` Robert Pluim
2017-08-01 12:02               ` Robert Pluim
2017-08-01 12:38                 ` Lars Ingebrigtsen
2017-08-01 13:01                   ` Robert Pluim
2017-08-01 14:45                   ` Paul Eggert
2017-08-01 14:53                     ` Lars Ingebrigtsen
2017-08-01 15:12                       ` Robert Pluim
2017-08-01 17:56                       ` Stefan Monnier
2017-08-03 11:48                         ` Lars Ingebrigtsen [this message]
2017-08-03 15:52                           ` Stefan Monnier
2017-08-03 19:30                             ` Ted Zlatanov
2017-08-04  5:40                               ` Eli Zaretskii
2017-08-04 13:13                                 ` Ted Zlatanov
2017-08-04 14:51                                   ` Eli Zaretskii
2017-08-04 17:26                                     ` Stefan Monnier
2017-08-04 19:50                                     ` Ted Zlatanov
2017-08-04 21:21                                       ` Stefan Monnier
2017-08-04 23:09                                         ` Ted Zlatanov
2017-08-05  7:21                                       ` Michael Albinus
2017-08-06 19:17                                         ` common Emacs notifications and alert.el (John W.) package (was: Deprecate TLS1.0 support in emacs) Ted Zlatanov
2017-08-07  1:42                                           ` common Emacs notifications and alert.el (John W.) package John Wiegley
2017-08-11 13:55                                             ` Ted Zlatanov
2017-08-15 17:06                                           ` common Emacs notifications and alert.el (John W.) package (was: Deprecate TLS1.0 support in emacs) Eli Zaretskii
2017-08-15 17:13                                             ` common Emacs notifications and alert.el (John W.) package John Wiegley
2017-08-04 14:59                                   ` Deprecate TLS1.0 support in emacs Michael Albinus
2017-08-03 19:39                             ` Lars Ingebrigtsen
2017-08-04 21:35                             ` Richard Stallman
2017-08-03 19:32                         ` Ted Zlatanov
2017-08-04  3:17                           ` Stefan Monnier
2017-08-04 13:09                             ` Ted Zlatanov
2017-08-04 15:02                               ` Lars Ingebrigtsen
2017-08-04 17:29                               ` Stefan Monnier
2017-08-07  9:54                               ` Robert Pluim
2017-08-10 15:33                                 ` Ted Zlatanov
2017-08-11  3:15                                   ` Paul Eggert
2017-08-11 13:53                                     ` Ted Zlatanov

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=873798j2ij.fsf@mouse \
    --to=larsi@gnus.org \
    --cc=emacs-devel@gnu.org \
    --cc=monnier@iro.umontreal.ca \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body.
Code repositories for project(s) associated with this external index

	https://git.savannah.gnu.org/cgit/emacs.git
	https://git.savannah.gnu.org/cgit/emacs/org-mode.git

This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.