From mboxrd@z Thu Jan 1 00:00:00 1970 Path: news.gmane.org!not-for-mail From: Juanma Barranquero Newsgroups: gmane.emacs.devel Subject: Re: GnuTLS for W32 Date: Mon, 2 Jan 2012 03:57:44 +0100 Message-ID: References: <87aa68dfao.fsf@lifelogs.com> <87ty4fbje8.fsf@lifelogs.com> <83ehvjs8t5.fsf@gnu.org> <87pqf3bcom.fsf@lifelogs.com> <83boqns68o.fsf@gnu.org> <87liprazr1.fsf@lifelogs.com> <83wr9bqez3.fsf@gnu.org> <87y5tr9dwv.fsf_-_@lifelogs.com> <87k45alwgb.fsf@wanadoo.es> <87fwfyltm1.fsf@wanadoo.es> NNTP-Posting-Host: lo.gmane.org Mime-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: quoted-printable X-Trace: dough.gmane.org 1325473114 2798 80.91.229.12 (2 Jan 2012 02:58:34 GMT) X-Complaints-To: usenet@dough.gmane.org NNTP-Posting-Date: Mon, 2 Jan 2012 02:58:34 +0000 (UTC) Cc: emacs-devel@gnu.org To: =?UTF-8?Q?=C3=93scar_Fuentes?= Original-X-From: emacs-devel-bounces+ged-emacs-devel=m.gmane.org@gnu.org Mon Jan 02 03:58:30 2012 Return-path: Envelope-to: ged-emacs-devel@m.gmane.org Original-Received: from lists.gnu.org ([140.186.70.17]) by lo.gmane.org with esmtp (Exim 4.69) (envelope-from ) id 1RhY6Y-00009s-Kk for ged-emacs-devel@m.gmane.org; Mon, 02 Jan 2012 03:58:30 +0100 Original-Received: from localhost ([::1]:59119 helo=lists.gnu.org) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1RhY6Y-0001iX-0B for ged-emacs-devel@m.gmane.org; Sun, 01 Jan 2012 21:58:30 -0500 Original-Received: from eggs.gnu.org ([140.186.70.92]:46832) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1RhY6V-0001iS-Jq for emacs-devel@gnu.org; Sun, 01 Jan 2012 21:58:28 -0500 Original-Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1RhY6U-0003Ls-Qh for emacs-devel@gnu.org; Sun, 01 Jan 2012 21:58:27 -0500 Original-Received: from mail-pw0-f41.google.com ([209.85.160.41]:45691) by eggs.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1RhY6U-0003Lo-Jz for emacs-devel@gnu.org; Sun, 01 Jan 2012 21:58:26 -0500 Original-Received: by pbdd2 with SMTP id d2so10203047pbd.0 for ; Sun, 01 Jan 2012 18:58:25 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=mime-version:in-reply-to:references:from:date:message-id:subject:to :cc:content-type:content-transfer-encoding; bh=+4/ji59LJ9sgb3b+wIHizqFxlio2YUNgV1xqKEO7sqk=; b=uIwqV1CPK8LBWCmYh62kxY3CxFwb8DFdJrQGB43rtkIPaxt37wTNhyx01PgZDsBT80 BFSEeLDyVUENUBe1J2UCyYBS8gHNmXrYuKY9QYjP6555wR+ktNu/ezJMtyhpMyWpwlQ/ cVnqvbDv7WUarlDVNu9RS2SjoPiskCJcEdUTc= Original-Received: by 10.68.73.135 with SMTP id l7mr116278110pbv.57.1325473105451; Sun, 01 Jan 2012 18:58:25 -0800 (PST) Original-Received: by 10.142.247.28 with HTTP; Sun, 1 Jan 2012 18:57:44 -0800 (PST) In-Reply-To: <87fwfyltm1.fsf@wanadoo.es> X-detected-operating-system: by eggs.gnu.org: GNU/Linux 2.6 (newer, 2) X-Received-From: 209.85.160.41 X-BeenThere: emacs-devel@gnu.org X-Mailman-Version: 2.1.14 Precedence: list List-Id: "Emacs development discussions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: emacs-devel-bounces+ged-emacs-devel=m.gmane.org@gnu.org Original-Sender: emacs-devel-bounces+ged-emacs-devel=m.gmane.org@gnu.org Xref: news.gmane.org gmane.emacs.devel:147152 Archived-At: > Do we implement security only when many users are at risk? Irrelevant. We've implemented security, we're talking about defaults. And that's what cost-benefit analysis is for. The answer could well be yes, if the alternative to "many" is "almost no-one". > Including the GnuTLS binary with the official binary packages shouldn't > be too costly, if we consider how rare Emacs releases are. The moment a serious bug is detected in GnuTLS, you have to issue updated packages and get the word out. It's not as easy as you put it. > As for the > other option, GnuTLS support could be prominently advertised, not just > listed as another item on NEWS. Agreed. > Shrugh. Security-wise, this way of thinking is responsible for lots of > disasters. For some definition of "lots", sure. > I wouldn't detect if someone were eavesdropping my network > communications, nor would you. Considering that I'm in a very small, non-WiFi network behind a rather paranoid firewall, trust me: if someone is eavesdropping my network, Emacs is the lesser of my troubles. =C2=A0 =C2=A0 Juanma