all messages for Emacs-related lists mirrored at yhetil.org
 help / color / mirror / code / Atom feed
* Additional network security
@ 2014-12-05 15:10 Lars Magne Ingebrigtsen
  2014-12-05 18:43 ` Stefan Monnier
                   ` (2 more replies)
  0 siblings, 3 replies; 25+ messages in thread
From: Lars Magne Ingebrigtsen @ 2014-12-05 15:10 UTC (permalink / raw)
  To: emacs-devel

It kinda looks like the world didn't end when the NSM was switched on,
so perhaps it's time to discuss whether we should add additional
security, and if so, what and how.

Some other browsers are discussing switching off "weak" encryption in
one form or another.  I don't think that's a good idea, because
sometimes you want to visit web sites and don't care whether they use
"good" encryption or not.

But it might make sense to warn users that this is happening.  Perhaps
by default, perhaps only if they have switched to `high' security.

Candidates for these warnings would be

* low prime-bits used in the Diffie-Hellman handshake
* SSL1, SSL2 and SSL3
* usage of RC4 anywhere

Can anybody think of anything else that's considered "weak" these days?

Perhaps it might make sense to allow users to specify high-grained
security policies?  That is

(setq network-security-level '(starttls-downgrade ssl3 rc4))

or something?  Where `medium' would just be an alias for the default
things we check for...

On the other hand, perhaps not.  There's a temptation in Emacs to make
everything configurable, and I think that's a mistake.  Instead of
implementing a feature, we end up implementing a framework for creating
the feature, so the user ends up having to do all the work to get things
into a reasonable state.

And allowing users to configure stuff means that we don't have to be as
thorough in getting things just right, because "they can always switch
it off" or something, which is a cop-out.  And making stuff configurable
inevitably means that it's more prone to bugs, because there are code
paths almost never taken.

Users also gets frustrated by this endless variety.  I've seen people
say "oh, Emacs is so awful.  I have a 70K big .emacs, and then I
switched to Sublime Text, and I'm so much happier".  (Because they have
to take it or leave it.)

How about a new policy: Unless it really obviously should be
configurable, nothing get to be configurable until at least 100 users
have asked for it?  :-)

-- 
(domestic pets only, the antidote for overdose, milk.)
   bloggy blog: http://lars.ingebrigtsen.no





^ permalink raw reply	[flat|nested] 25+ messages in thread

end of thread, other threads:[~2014-12-20 11:27 UTC | newest]

Thread overview: 25+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2014-12-05 15:10 Additional network security Lars Magne Ingebrigtsen
2014-12-05 18:43 ` Stefan Monnier
2014-12-06 17:32   ` Lars Magne Ingebrigtsen
2014-12-06 22:51     ` Stefan Monnier
2014-12-07  5:35       ` Stephen J. Turnbull
2014-12-07 16:32         ` Ted Zlatanov
2014-12-07 16:41           ` Lars Magne Ingebrigtsen
2014-12-07 17:03             ` Ted Zlatanov
2014-12-07 17:45               ` Lars Magne Ingebrigtsen
2014-12-07 18:28                 ` Ted Zlatanov
2014-12-07 20:37                 ` chad
2014-12-18 21:54                 ` Reiner Steib
2014-12-20 11:27                   ` Ted Zlatanov
2014-12-08  1:44           ` Stephen J. Turnbull
2014-12-08  0:24         ` Richard Stallman
2014-12-08 14:04           ` Ted Zlatanov
2014-12-08 18:04             ` Lars Magne Ingebrigtsen
2014-12-08 20:48             ` Lars Magne Ingebrigtsen
2014-12-08 20:57               ` Lars Magne Ingebrigtsen
2014-12-08 21:26                 ` Lars Magne Ingebrigtsen
2014-12-05 20:02 ` Jens Lechtenboerger
2014-12-06 17:33   ` Lars Magne Ingebrigtsen
2014-12-10 16:01     ` Ted Zlatanov
2014-12-07 16:33 ` Ted Zlatanov
2014-12-07 16:47   ` Lars Magne Ingebrigtsen

Code repositories for project(s) associated with this external index

	https://git.savannah.gnu.org/cgit/emacs.git
	https://git.savannah.gnu.org/cgit/emacs/org-mode.git

This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.