From mboxrd@z Thu Jan 1 00:00:00 1970 Path: news.gmane.org!not-for-mail From: Mark H Weaver Newsgroups: gmane.emacs.devel Subject: eww and https certificate checking Date: Thu, 02 Oct 2014 14:01:05 -0400 Message-ID: <877g0i73mm.fsf@netris.org> NNTP-Posting-Host: plane.gmane.org Mime-Version: 1.0 Content-Type: text/plain X-Trace: ger.gmane.org 1412276513 32104 80.91.229.3 (2 Oct 2014 19:01:53 GMT) X-Complaints-To: usenet@ger.gmane.org NNTP-Posting-Date: Thu, 2 Oct 2014 19:01:53 +0000 (UTC) To: emacs-devel@gnu.org Original-X-From: emacs-devel-bounces+ged-emacs-devel=m.gmane.org@gnu.org Thu Oct 02 21:01:47 2014 Return-path: Envelope-to: ged-emacs-devel@m.gmane.org Original-Received: from lists.gnu.org ([208.118.235.17]) by plane.gmane.org with esmtp (Exim 4.69) (envelope-from ) id 1XZldL-00083n-12 for ged-emacs-devel@m.gmane.org; Thu, 02 Oct 2014 21:01:47 +0200 Original-Received: from localhost ([::1]:35797 helo=lists.gnu.org) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1XZldK-0003dm-MT for ged-emacs-devel@m.gmane.org; Thu, 02 Oct 2014 15:01:46 -0400 Original-Received: from eggs.gnu.org ([2001:4830:134:3::10]:56589) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1XZkgp-0001M4-7f for emacs-devel@gnu.org; Thu, 02 Oct 2014 14:01:25 -0400 Original-Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1XZkgj-0005z5-CN for emacs-devel@gnu.org; Thu, 02 Oct 2014 14:01:19 -0400 Original-Received: from world.peace.net ([96.39.62.75]:48752) by eggs.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1XZkgj-0005yt-8n for emacs-devel@gnu.org; Thu, 02 Oct 2014 14:01:13 -0400 Original-Received: from c-24-62-95-23.hsd1.ma.comcast.net ([24.62.95.23] helo=jojen) by world.peace.net with esmtpsa (TLS1.0:RSA_AES_128_CBC_SHA1:16) (Exim 4.72) (envelope-from ) id 1XZkgc-0005kW-CA; Thu, 02 Oct 2014 14:01:06 -0400 X-detected-operating-system: by eggs.gnu.org: GNU/Linux 2.6.x X-Received-From: 96.39.62.75 X-Mailman-Approved-At: Thu, 02 Oct 2014 15:01:35 -0400 X-BeenThere: emacs-devel@gnu.org X-Mailman-Version: 2.1.14 Precedence: list List-Id: "Emacs development discussions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: emacs-devel-bounces+ged-emacs-devel=m.gmane.org@gnu.org Original-Sender: emacs-devel-bounces+ged-emacs-devel=m.gmane.org@gnu.org Xref: news.gmane.org gmane.emacs.devel:174945 Archived-At: On my (admittedly experimental) GNU Guix system, eww in Emacs 24.3.94 fails to do any https certificate checking. I tried connecting to an https URL with a self-signed (and long-expired) certificate, and saw no warnings at all. Lynx, linked with the same GnuTLS library on the same system, issues warnings. Is this problem specific to my system, or do other people see it too? Given the current widespread concern over internet security, I don't think this would be well received. I filed a bug report , but wanted to call attention to it here as well. Mark