From mboxrd@z Thu Jan 1 00:00:00 1970 Path: news.gmane.org!.POSTED!not-for-mail From: Stephen Berman Newsgroups: gmane.emacs.devel Subject: Re: A couple of questions and concerns about Emacs network security Date: Sat, 07 Jul 2018 15:47:04 +0200 Message-ID: <87o9fjdup3.fsf@gmx.net> References: <83po0iuhs7.fsf@gnu.org> <20180705113320.17e6b8ee@jabberwock.cb.piermont.com> <83po01mrvh.fsf@gnu.org> <87po00ahg9.fsf@gmail.com> <83601sn3yu.fsf@gnu.org> <87wou8itoy.fsf@gmx.net> <83po00leo5.fsf@gnu.org> <87sh4wiibi.fsf@gmx.net> <5B406894.2000204@gmx.at> <87d0vzfd5t.fsf@gmx.net> <83y3eni3js.fsf@gnu.org> NNTP-Posting-Host: blaine.gmane.org Mime-Version: 1.0 Content-Type: text/plain X-Trace: blaine.gmane.org 1530971160 7477 195.159.176.226 (7 Jul 2018 13:46:00 GMT) X-Complaints-To: usenet@blaine.gmane.org NNTP-Posting-Date: Sat, 7 Jul 2018 13:46:00 +0000 (UTC) User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/27.0.50 (gnu/linux) Cc: rudalics@gmx.at, rpluim@gmail.com, emacs-devel@gnu.org To: Eli Zaretskii Original-X-From: emacs-devel-bounces+ged-emacs-devel=m.gmane.org@gnu.org Sat Jul 07 15:45:55 2018 Return-path: Envelope-to: ged-emacs-devel@m.gmane.org Original-Received: from lists.gnu.org ([208.118.235.17]) by blaine.gmane.org with esmtp (Exim 4.84_2) (envelope-from ) id 1fbnX8-0001pw-9Z for ged-emacs-devel@m.gmane.org; Sat, 07 Jul 2018 15:45:54 +0200 Original-Received: from localhost ([::1]:33765 helo=lists.gnu.org) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1fbnZF-0001Ht-Gd for ged-emacs-devel@m.gmane.org; Sat, 07 Jul 2018 09:48:05 -0400 Original-Received: from eggs.gnu.org ([2001:4830:134:3::10]:38473) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1fbnYO-0001G9-Pz for emacs-devel@gnu.org; Sat, 07 Jul 2018 09:47:13 -0400 Original-Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1fbnYJ-0004Ji-Eb for emacs-devel@gnu.org; Sat, 07 Jul 2018 09:47:12 -0400 Original-Received: from mout.gmx.net ([212.227.17.22]:46123) by eggs.gnu.org with esmtps (TLS1.0:DHE_RSA_AES_128_CBC_SHA1:16) (Exim 4.71) (envelope-from ) id 1fbnYJ-0004JD-4m; Sat, 07 Jul 2018 09:47:07 -0400 Original-Received: from rosalinde ([188.109.198.110]) by mail.gmx.com (mrgmx102 [212.227.17.168]) with ESMTPSA (Nemesis) id 0MaE4a-1fML450O3k-00Juua; Sat, 07 Jul 2018 15:47:05 +0200 In-Reply-To: <83y3eni3js.fsf@gnu.org> (Eli Zaretskii's message of "Sat, 07 Jul 2018 16:22:15 +0300") X-Provags-ID: V03:K1:78O5eyTxjJ83C/5lyi6JxnzTK1MPsyFSE0jMWCTvIFEJAo/WD19 KL+WAhR0/8rfRBbiKZKFwLJlspSJ0BIuYjocTYUTr6FEnLwpfCcYIFzOuI8YeOdqwrAz/HM ETSi9lauRO1SLVLJSJkK1y3peeFG29yAFwfco31yEoJ9ijmWPeFujAlYPvBY1cOsdxBZaz/ N/dOlQz4hcxPKlR7gKmzA== X-UI-Out-Filterresults: notjunk:1;V01:K0:Bm9lkyQ7s+E=:6an+uqG/sHq6hMI8g96Kc8 bVdcN6Z2UyJZWH2QDodcxuJmURvY6uIUFG34txn3URhWzbrRK9/9GQU1slKv55D7NKjRmPp81 50uASsFm9b6khEWWbjWe4FXLrX1LlFZQ+rasBu4i1BmGedIdSw6vWJcqZ8w5VKeyOWPnJLSm+ InLdoDPk4LtOtpxk9gx1FyQpZuw9hTIMshiAHQ7eZSxhXfJTh9e41glco/Z7stNH47R5WG3D1 Dod5Wv8opdiTR3SvByfAXPubK2GfFNr59rDL28CvSGoX3DZNOiHcs6ARa5ub46hgLiwoZQX6n 7yA1ss4+SFRfL9/DW8ZbYP1Ik9x9K46uUvc+eSibbOOnqxWTgdDB1+7c9tI7tPcpmIWq4b14R ljohDqksftAxQMoLsj6rVvDPsaCZGsSZ6PtsEGJDNSlJcRBcvpk30+N0Mb/itu8hCStpDlD3c nu6MkNdIExroIbXceKcvx+ajLRVlkwPdXYwnXhwgjN9piuXRxuNtg6Z19ptNx9ZoW2cHhy8AM ivz9XwedGTf2rRIwN6xIjZ8abkxXDRXYqpZDueeA6OPflRo4R0hVDD65T2y1ZV8S3ApGaVDGr boK8N3wm6dyM6NSzVrzG1vdahbE1270QskeZkG65PDA1uujjJgtxewo1KlLHebNimMWWtUQ9d oPY7KWKTbgzxD2Avlg55+TFLI46oFItz/8N4dhSbg9yqzsShJtpLSpEO0ODjhsaZ+Dovx0Awo YzsxxDegecgMIfYe/cWeJRFj0hH5gaLLONIrG/6APeQhILUrWojMQuEd9/nS0RgUUgsuiHKe X-detected-operating-system: by eggs.gnu.org: GNU/Linux 2.2.x-3.x [generic] [fuzzy] X-Received-From: 212.227.17.22 X-BeenThere: emacs-devel@gnu.org X-Mailman-Version: 2.1.21 Precedence: list List-Id: "Emacs development discussions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: emacs-devel-bounces+ged-emacs-devel=m.gmane.org@gnu.org Original-Sender: "Emacs-devel" Xref: news.gmane.org gmane.emacs.devel:227057 Archived-At: On Sat, 07 Jul 2018 16:22:15 +0300 Eli Zaretskii wrote: >> From: Stephen Berman >> Cc: Eli Zaretskii , rpluim@gmail.com, emacs-devel@gnu.org >> Date: Sat, 07 Jul 2018 14:22:54 +0200 >> >> On Sat, 07 Jul 2018 09:15:32 +0200 martin rudalics wrote: >> >> >>> And the users who have made such a setting don't need the >> >>> defaults to change anyway. >> >> >> >> No, but it's the new users who would benefit. >> > >> > Shouldn't new users face such changes with major releases only? >> >> Since this is a security-related change, it depends on the maintainers' >> judgment of the risks (both of making the change and of not making it). > > When making these judgment calls, are we allowed to apply the same > principle as you did, namely that the current situation "has been > tested for at least five years", and therefore we can conclude that no > urgent change is needed? If I were in a position to allow or forbid you anything, I would certainly allow you that. Steve Berman