all messages for Emacs-related lists mirrored at yhetil.org
 help / color / mirror / code / Atom feed
* bug#19284: 25.0.50; tls.el uses option --insecure
@ 2014-12-05 19:43 Jens Lechtenboerger
  2015-12-26 21:15 ` Lars Ingebrigtsen
  0 siblings, 1 reply; 14+ messages in thread
From: Jens Lechtenboerger @ 2014-12-05 19:43 UTC (permalink / raw)
  To: 19284

This is a followup to bug#16978, where I reported multiple MITM
issues.

tls.el calls gnutls-cli with option --insecure.

As Emacs applies TOFU by default via nsm.el (great work, many
thanks!), the above is dangerous.  I continue to use the following:
(setq tls-program '("gnutls-cli --strict-tofu -p %p %h"))

I’m not sure under what conditions tls.el is necessary.  Is it?

Best wishes
Jens





^ permalink raw reply	[flat|nested] 14+ messages in thread

end of thread, other threads:[~2015-12-31 18:32 UTC | newest]

Thread overview: 14+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2014-12-05 19:43 bug#19284: 25.0.50; tls.el uses option --insecure Jens Lechtenboerger
2015-12-26 21:15 ` Lars Ingebrigtsen
2015-12-26 21:39   ` Andreas Schwab
2015-12-26 21:49     ` Lars Ingebrigtsen
2015-12-27  9:59       ` Andreas Schwab
2015-12-28 22:04   ` Ted Zlatanov
2015-12-29 13:29     ` Lars Ingebrigtsen
2015-12-29 19:25     ` Ivan Shmakov
2015-12-30 14:46       ` Ted Zlatanov
2015-12-30 15:57         ` Ivan Shmakov
2015-12-30 16:38           ` Ted Zlatanov
2015-12-30 18:22         ` Lars Magne Ingebrigtsen
2015-12-31 16:00           ` Ted Zlatanov
2015-12-31 18:32             ` Ivan Shmakov

Code repositories for project(s) associated with this external index

	https://git.savannah.gnu.org/cgit/emacs.git
	https://git.savannah.gnu.org/cgit/emacs/org-mode.git

This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.