From mboxrd@z Thu Jan 1 00:00:00 1970 Path: news.gmane.org!not-for-mail From: Ted Zlatanov Newsgroups: gmane.emacs.bugs Subject: bug#13374: 24.?; open-gnutls-stream insecurity Date: Tue, 08 Jan 2013 10:24:43 -0500 Organization: =?UTF-8?Q?=D0=A2=D0=B5=D0=BE=D0=B4=D0=BE=D1=80_?= =?UTF-8?Q?=D0=97=D0=BB=D0=B0=D1=82=D0=B0=D0=BD=D0=BE=D0=B2?= @ Cienfuegos Message-ID: <87hamrg0jo.fsf@lifelogs.com> References: <87mwwlz43m.fsf@Black.ICE> <3fhamscn9w.fsf@fencepost.gnu.org> <871udvhh11.fsf@lifelogs.com> Reply-To: bug-gnu-emacs@gnu.org NNTP-Posting-Host: plane.gmane.org Mime-Version: 1.0 Content-Type: text/plain X-Trace: ger.gmane.org 1357658766 15496 80.91.229.3 (8 Jan 2013 15:26:06 GMT) X-Complaints-To: usenet@ger.gmane.org NNTP-Posting-Date: Tue, 8 Jan 2013 15:26:06 +0000 (UTC) To: 13374@debbugs.gnu.org Original-X-From: bug-gnu-emacs-bounces+geb-bug-gnu-emacs=m.gmane.org@gnu.org Tue Jan 08 16:26:24 2013 Return-path: Envelope-to: geb-bug-gnu-emacs@m.gmane.org Original-Received: from lists.gnu.org ([208.118.235.17]) by plane.gmane.org with esmtp (Exim 4.69) (envelope-from ) id 1Tsb4H-0004OS-Ap for geb-bug-gnu-emacs@m.gmane.org; Tue, 08 Jan 2013 16:26:21 +0100 Original-Received: from localhost ([::1]:40637 helo=lists.gnu.org) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1Tsb41-00021D-Iv for geb-bug-gnu-emacs@m.gmane.org; Tue, 08 Jan 2013 10:26:05 -0500 Original-Received: from eggs.gnu.org ([208.118.235.92]:46299) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1Tsb3y-00020R-RA for bug-gnu-emacs@gnu.org; Tue, 08 Jan 2013 10:26:03 -0500 Original-Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1Tsb3t-0003mB-TX for bug-gnu-emacs@gnu.org; Tue, 08 Jan 2013 10:26:02 -0500 Original-Received: from debbugs.gnu.org ([140.186.70.43]:43661) by eggs.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1Tsb3t-0003m7-Pv for bug-gnu-emacs@gnu.org; Tue, 08 Jan 2013 10:25:57 -0500 Original-Received: from Debian-debbugs by debbugs.gnu.org with local (Exim 4.72) (envelope-from ) id 1Tsb3y-0004Dq-1u for bug-gnu-emacs@gnu.org; Tue, 08 Jan 2013 10:26:02 -0500 X-Loop: help-debbugs@gnu.org In-Reply-To: <87mwwlz43m.fsf@Black.ICE> Resent-From: Ted Zlatanov Original-Sender: debbugs-submit-bounces@debbugs.gnu.org Resent-CC: bug-gnu-emacs@gnu.org Resent-Date: Tue, 08 Jan 2013 15:26:02 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 13374 X-GNU-PR-Package: emacs X-GNU-PR-Keywords: X-Debbugs-Original-To: bug-gnu-emacs@gnu.org Original-Received: via spool by submit@debbugs.gnu.org id=B.135765872516185 (code B ref -1); Tue, 08 Jan 2013 15:26:02 +0000 Original-Received: (at submit) by debbugs.gnu.org; 8 Jan 2013 15:25:25 +0000 Original-Received: from localhost ([127.0.0.1]:56902 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.72) (envelope-from ) id 1Tsb3N-0004D0-9e for submit@debbugs.gnu.org; Tue, 08 Jan 2013 10:25:25 -0500 Original-Received: from eggs.gnu.org ([208.118.235.92]:34692) by debbugs.gnu.org with esmtp (Exim 4.72) (envelope-from ) id 1Tsb3I-0004Ck-8y for submit@debbugs.gnu.org; Tue, 08 Jan 2013 10:25:24 -0500 Original-Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1Tsb34-0003cP-Cj for submit@debbugs.gnu.org; Tue, 08 Jan 2013 10:25:10 -0500 Original-Received: from lists.gnu.org ([208.118.235.17]:50162) by eggs.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1Tsb34-0003c6-9I for submit@debbugs.gnu.org; Tue, 08 Jan 2013 10:25:06 -0500 Original-Received: from eggs.gnu.org ([208.118.235.92]:45990) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1Tsb2z-0001hB-8k for bug-gnu-emacs@gnu.org; Tue, 08 Jan 2013 10:25:06 -0500 Original-Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1Tsb2u-0003O9-KV for bug-gnu-emacs@gnu.org; Tue, 08 Jan 2013 10:25:01 -0500 Original-Received: from plane.gmane.org ([80.91.229.3]:44811) by eggs.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1Tsb2u-0003O1-Dj for bug-gnu-emacs@gnu.org; Tue, 08 Jan 2013 10:24:56 -0500 Original-Received: from list by plane.gmane.org with local (Exim 4.69) (envelope-from ) id 1Tsb36-0002lx-65 for bug-gnu-emacs@gnu.org; Tue, 08 Jan 2013 16:25:08 +0100 Original-Received: from c-65-96-148-157.hsd1.ma.comcast.net ([65.96.148.157]) by main.gmane.org with esmtp (Gmexim 0.1 (Debian)) id 1AlnuQ-0007hv-00 for ; Tue, 08 Jan 2013 16:25:08 +0100 Original-Received: from tzz by c-65-96-148-157.hsd1.ma.comcast.net with local (Gmexim 0.1 (Debian)) id 1AlnuQ-0007hv-00 for ; Tue, 08 Jan 2013 16:25:08 +0100 X-Injected-Via-Gmane: http://gmane.org/ Mail-Followup-To: bug-gnu-emacs@gnu.org Original-Lines: 18 Original-X-Complaints-To: usenet@ger.gmane.org X-Gmane-NNTP-Posting-Host: c-65-96-148-157.hsd1.ma.comcast.net X-Face: bd.DQ~'29fIs`T_%O%C\g%6jW)yi[zuz6; d4V0`@y-~$#3P_Ng{@m+e4o<4P'#(_GJQ%TT= D}[Ep*b!\e,fBZ'j_+#"Ps?s2!4H2-Y"sx" Mail-Copies-To: never User-Agent: Gnus/5.130006 (Ma Gnus v0.6) Emacs/24.3.50 (gnu/linux) Cancel-Lock: sha1:ml3Tvip/Dq2I+9LQagv0W9bcPqc= X-detected-operating-system: by eggs.gnu.org: Genre and OS details not recognized. X-detected-operating-system: by eggs.gnu.org: GNU/Linux 2.6.x X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.13 Precedence: list X-detected-operating-system: by eggs.gnu.org: GNU/Linux 2.6.x X-Received-From: 140.186.70.43 X-BeenThere: bug-gnu-emacs@gnu.org List-Id: "Bug reports for GNU Emacs, the Swiss army knife of text editors" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: bug-gnu-emacs-bounces+geb-bug-gnu-emacs=m.gmane.org@gnu.org Original-Sender: bug-gnu-emacs-bounces+geb-bug-gnu-emacs=m.gmane.org@gnu.org Xref: news.gmane.org gmane.emacs.bugs:69498 Archived-At: On Tue, 08 Jan 2013 15:49:28 +0100 Lars Magne Ingebrigtsen wrote: LMI> Ted Zlatanov writes: >> It should default to nil (in other words, we'll ship 24.3 with the same >> insecure behavior it has right now). But we can recommend to the users >> to turn it on, and see how well it works in practice, and write the >> necessary prompts and customization logic that Lars outlined. LMI> I think we should just leave things as is for 24.3, since it's too close LMI> to release, and fix this properly for 24.5. Instituting an option like LMI> that (which will have to be abandoned later) as a stop-gap I feel isn't LMI> all that helpful. LMI> I think. OK with me. Is there a way to mark the bug is deferred so? Maybe a fix-version? Ted