From mboxrd@z Thu Jan 1 00:00:00 1970 Path: news.gmane.org!.POSTED.blaine.gmane.org!not-for-mail From: Lars Ingebrigtsen Newsgroups: gmane.emacs.bugs Subject: bug#27823: 26.0.50; nsm in paranoid mode always saves fingerprint in session-only mode Date: Mon, 15 Jul 2019 20:32:43 +0200 Message-ID: <875zo39mic.fsf@mouse.gnus.org> References: <87wp6w36pg.fsf@gmail.com> Mime-Version: 1.0 Content-Type: text/plain Injection-Info: blaine.gmane.org; posting-host="blaine.gmane.org:195.159.176.226"; logging-data="89798"; mail-complaints-to="usenet@blaine.gmane.org" User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/27.0.50 (gnu/linux) Cc: 27823@debbugs.gnu.org To: Robert Pluim Original-X-From: bug-gnu-emacs-bounces+geb-bug-gnu-emacs=m.gmane.org@gnu.org Mon Jul 15 20:33:14 2019 Return-path: Envelope-to: geb-bug-gnu-emacs@m.gmane.org Original-Received: from lists.gnu.org ([209.51.188.17]) by blaine.gmane.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.89) (envelope-from ) id 1hn5mh-000NEV-5G for geb-bug-gnu-emacs@m.gmane.org; Mon, 15 Jul 2019 20:33:11 +0200 Original-Received: from localhost ([::1]:41786 helo=lists1p.gnu.org) by lists.gnu.org with esmtp (Exim 4.86_2) (envelope-from ) id 1hn5mg-0000a6-5r for geb-bug-gnu-emacs@m.gmane.org; Mon, 15 Jul 2019 14:33:10 -0400 Original-Received: from eggs.gnu.org ([2001:470:142:3::10]:59477) by lists.gnu.org with esmtp (Exim 4.86_2) (envelope-from ) id 1hn5mc-0000Uk-Bg for bug-gnu-emacs@gnu.org; Mon, 15 Jul 2019 14:33:07 -0400 Original-Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1hn5ma-00061W-C5 for bug-gnu-emacs@gnu.org; Mon, 15 Jul 2019 14:33:06 -0400 Original-Received: from debbugs.gnu.org ([209.51.188.43]:40241) by eggs.gnu.org with esmtps (TLS1.0:RSA_AES_128_CBC_SHA1:16) (Exim 4.71) (envelope-from ) id 1hn5mX-0005zB-Rx for bug-gnu-emacs@gnu.org; Mon, 15 Jul 2019 14:33:02 -0400 Original-Received: from Debian-debbugs by debbugs.gnu.org with local (Exim 4.84_2) (envelope-from ) id 1hn5mX-0005k8-NU for bug-gnu-emacs@gnu.org; Mon, 15 Jul 2019 14:33:01 -0400 X-Loop: help-debbugs@gnu.org Resent-From: Lars Ingebrigtsen Original-Sender: "Debbugs-submit" Resent-CC: bug-gnu-emacs@gnu.org Resent-Date: Mon, 15 Jul 2019 18:33:01 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 27823 X-GNU-PR-Package: emacs X-GNU-PR-Keywords: security Original-Received: via spool by 27823-submit@debbugs.gnu.org id=B27823.156321557022046 (code B ref 27823); Mon, 15 Jul 2019 18:33:01 +0000 Original-Received: (at 27823) by debbugs.gnu.org; 15 Jul 2019 18:32:50 +0000 Original-Received: from localhost ([127.0.0.1]:49059 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1hn5mM-0005jV-0R for submit@debbugs.gnu.org; Mon, 15 Jul 2019 14:32:50 -0400 Original-Received: from quimby.gnus.org ([80.91.231.51]:46970) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1hn5mJ-0005jN-OR for 27823@debbugs.gnu.org; Mon, 15 Jul 2019 14:32:48 -0400 Original-Received: from cm-84.212.202.86.getinternet.no ([84.212.202.86] helo=sandy) by quimby.gnus.org with esmtpsa (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.89) (envelope-from ) id 1hn5mF-000244-Gu; Mon, 15 Jul 2019 20:32:46 +0200 In-Reply-To: <87wp6w36pg.fsf@gmail.com> (Robert Pluim's message of "Tue, 25 Jul 2017 16:57:15 +0200") X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list X-detected-operating-system: by eggs.gnu.org: GNU/Linux 2.2.x-3.x [generic] X-Received-From: 209.51.188.43 X-BeenThere: bug-gnu-emacs@gnu.org List-Id: "Bug reports for GNU Emacs, the Swiss army knife of text editors" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: bug-gnu-emacs-bounces+geb-bug-gnu-emacs=m.gmane.org@gnu.org Original-Sender: "bug-gnu-emacs" Xref: news.gmane.org gmane.emacs.bugs:163157 Archived-At: Robert Pluim writes: > emacs -Q > (setq network-security-level 'paranoid) > M-x eww RET > https://lists.gnu.org RET > ; Answer 'session only' to the prompt > C-x C-c > emacs -Q > (setq network-security-level 'paranoid) > M-x eww RET > https://lists.gnu.org RET > > ; Be very surprised that you're not reprompted to accept the > certificate, and see that its fingerprint has been added to > network-security.data > > If I've said 'session only', I expect emacs to save nothing about the > connection at all. Yup. Looks like the error was in the NSM saving the fingerprint once more after it had already been saved in the correct temporary storage. This should now be fixed on the trunk. -- (domestic pets only, the antidote for overdose, milk.) bloggy blog: http://lars.ingebrigtsen.no