From mboxrd@z Thu Jan 1 00:00:00 1970 Path: news.gmane.org!.POSTED!not-for-mail From: Robert Pluim Newsgroups: gmane.emacs.bugs Subject: bug#29978: wishlist: gnutls-verify-error needs a 'ask mode Date: Thu, 04 Jan 2018 17:46:36 +0100 Message-ID: <87y3ldtvv7.fsf@gmail.com> References: <87fu7l7iq6.fsf@gmail.com> <87r2r58uee.fsf@gmail.com> NNTP-Posting-Host: blaine.gmane.org Mime-Version: 1.0 Content-Type: text/plain X-Trace: blaine.gmane.org 1515085185 26248 195.159.176.226 (4 Jan 2018 16:59:45 GMT) X-Complaints-To: usenet@blaine.gmane.org NNTP-Posting-Date: Thu, 4 Jan 2018 16:59:45 +0000 (UTC) User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/26.0.90 (gnu/linux) Cc: 29978-done@debbugs.gnu.org To: Andreas Schwab Original-X-From: bug-gnu-emacs-bounces+geb-bug-gnu-emacs=m.gmane.org@gnu.org Thu Jan 04 17:59:41 2018 Return-path: Envelope-to: geb-bug-gnu-emacs@m.gmane.org Original-Received: from lists.gnu.org ([208.118.235.17]) by blaine.gmane.org with esmtp (Exim 4.84_2) (envelope-from ) id 1eX8rc-00067J-Ri for geb-bug-gnu-emacs@m.gmane.org; Thu, 04 Jan 2018 17:59:32 +0100 Original-Received: from localhost ([::1]:50557 helo=lists.gnu.org) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1eX8tb-0001P1-NU for geb-bug-gnu-emacs@m.gmane.org; Thu, 04 Jan 2018 12:01:35 -0500 Original-Received: from eggs.gnu.org ([2001:4830:134:3::10]:60381) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1eX8fb-00044U-Kq for bug-gnu-emacs@gnu.org; Thu, 04 Jan 2018 11:47:11 -0500 Original-Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1eX8fW-0007Vt-OS for bug-gnu-emacs@gnu.org; Thu, 04 Jan 2018 11:47:07 -0500 Original-Received: from debbugs.gnu.org ([208.118.235.43]:55435) by eggs.gnu.org with esmtps (TLS1.0:RSA_AES_128_CBC_SHA1:16) (Exim 4.71) (envelope-from ) id 1eX8fW-0007Vj-KM for bug-gnu-emacs@gnu.org; Thu, 04 Jan 2018 11:47:02 -0500 Original-Received: from Debian-debbugs by debbugs.gnu.org with local (Exim 4.84_2) (envelope-from ) id 1eX8fW-0003hw-Co for bug-gnu-emacs@gnu.org; Thu, 04 Jan 2018 11:47:02 -0500 Resent-From: Robert Pluim Original-Sender: "Debbugs-submit" Resent-To: bug-gnu-emacs@gnu.org Resent-Date: Thu, 04 Jan 2018 16:47:02 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: cc-closed 29978 X-GNU-PR-Package: emacs X-GNU-PR-Keywords: Mail-Followup-To: 29978@debbugs.gnu.org, rpluim@gmail.com, rpluim@gmail.com Original-Received: via spool by 29978-done@debbugs.gnu.org id=D29978.151508440514226 (code D ref 29978); Thu, 04 Jan 2018 16:47:02 +0000 Original-Received: (at 29978-done) by debbugs.gnu.org; 4 Jan 2018 16:46:45 +0000 Original-Received: from localhost ([127.0.0.1]:35881 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1eX8fF-0003hO-Jq for submit@debbugs.gnu.org; Thu, 04 Jan 2018 11:46:45 -0500 Original-Received: from mail-wr0-f180.google.com ([209.85.128.180]:43223) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1eX8fE-0003hB-Cq for 29978-done@debbugs.gnu.org; Thu, 04 Jan 2018 11:46:44 -0500 Original-Received: by mail-wr0-f180.google.com with SMTP id w68so2033696wrc.10 for <29978-done@debbugs.gnu.org>; Thu, 04 Jan 2018 08:46:44 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=from:to:cc:subject:references:gmane-reply-to-list:date:in-reply-to :message-id:user-agent:mime-version; bh=+4/FlO6BQwZAG4cwqk1lOglab58rssJFAalxe+4rViQ=; b=DtJMMVA7MfERRa3Lg2BC/gYDl/RwFentCYvkcIBuysgsywDEApGdnphCWls/WjI4bL 4SoVEUkfMbpFOVUqMXTv9RxjA5DdA2pUJKUYr+IVan4WMh4/5iiCPhOlnspi44W7Ib9p TQCDehaS4a+wiHugQZdQ9vS4K3Trx8osTnZZ4e2mf/+QimGKJlVKQpoyyk2Jmyke3wFX NW463qN2uy3MR0BLlqYtSX25en4tpW7N6bMPjIPaZny/fBF27gb543ztVLsDpkeWinPX Aius0SWw85FtVaxa4jfbd2djCNgAIR3SsPtYUH3E1bEjA4VQba4fwCL7kFOGadPbkXg2 KEbg== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:from:to:cc:subject:references :gmane-reply-to-list:date:in-reply-to:message-id:user-agent :mime-version; bh=+4/FlO6BQwZAG4cwqk1lOglab58rssJFAalxe+4rViQ=; b=L6CRe5ZutMJfELVPETpZ3758KSpA8lSKdzhmYx58wTGkO2GwWhYDghSjfkpb68nmQY 3unIo5EruvFSsUllTmAc8Zz71gbLhPqI+jEq4Pd2LNLK62BqNo8DoanzXQ7RiDe/Ehgv OvSkLcjZ6ZuHFe5ptb223epYmsIhCRwfK9cBvEEDRkpiO78qLNKDGoGY4FywWLw+wl9r rwnfEKYum6/7WelgQCqkylfz069lLVzNwYHAv+mvK0lnnzVjQDwFWbECfdHQo01Knu6w omQ8ZyY2sglPeQFkKiS7D6gVSSz5B/8oZLZz3ILPNPye4HP5WBwyoE+wnpXc7jthiPH5 uuQg== X-Gm-Message-State: AKGB3mIeGW0Dm1PeM6W0MEqaHb9U2HbosqMQl/hrmfjTig9VKE++SezS uQLKYI1CeuP+56vgSwIqLM1n+0tGx3Y= X-Google-Smtp-Source: ACJfBosdc8UQ/NR/Pi4DxfMsQNpr3kdzkfU6N+lE3TegcEER7dXmpu6rL/Xb9kPTB3QYmBTHJqzACA== X-Received: by 10.223.153.144 with SMTP id y16mr165598wrb.45.1515084398263; Thu, 04 Jan 2018 08:46:38 -0800 (PST) Original-Received: from rpluim ([149.5.228.1]) by smtp.gmail.com with ESMTPSA id i47sm3890454wra.97.2018.01.04.08.46.36 (version=TLS1_2 cipher=ECDHE-RSA-CHACHA20-POLY1305 bits=256/256); Thu, 04 Jan 2018 08:46:37 -0800 (PST) Gmane-Reply-To-List: yes In-Reply-To: <87r2r58uee.fsf@gmail.com> (Robert Pluim's message of "Thu, 04 Jan 2018 17:23:53 +0100") X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list X-detected-operating-system: by eggs.gnu.org: GNU/Linux 2.2.x-3.x [generic] X-Received-From: 208.118.235.43 X-BeenThere: bug-gnu-emacs@gnu.org List-Id: "Bug reports for GNU Emacs, the Swiss army knife of text editors" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: bug-gnu-emacs-bounces+geb-bug-gnu-emacs=m.gmane.org@gnu.org Original-Sender: "bug-gnu-emacs" Xref: news.gmane.org gmane.emacs.bugs:141776 Archived-At: Robert Pluim writes: > Andreas Schwab writes: > >> On Jan 04 2018, Robert Pluim wrote: >> >>> Verification using gnutls-verify-error is currently an either-or >>> proposition: if the verification fails, there's no fallback. Typical >>> browser implementations allow querying the user for the desired >>> action, emacs should allow something similar. >> >> Isn't that what NSM is about? > > NSM doesn't currently come into play until gnutls.c has finished > setting up the TLS connection. Since gnutls.c is the one doing the > verification, by then it's too late. Umm, nevermind. I hadn't realized nsm already implemented these checks. Closing.