From mboxrd@z Thu Jan 1 00:00:00 1970 Path: news.gmane.org!.POSTED!not-for-mail From: Noam Postavsky Newsgroups: gmane.emacs.devel Subject: Re: A couple of questions and concerns about Emacs network security Date: Thu, 5 Jul 2018 14:43:50 -0400 Message-ID: References: <83po0iuhs7.fsf@gnu.org> <83lgb4tg92.fsf@gnu.org> <83efgusvdw.fsf@gnu.org> <20180705115259.4032dbea@jabberwock.cb.piermont.com> NNTP-Posting-Host: blaine.gmane.org Mime-Version: 1.0 Content-Type: text/plain; charset="UTF-8" X-Trace: blaine.gmane.org 1530816122 25297 195.159.176.226 (5 Jul 2018 18:42:02 GMT) X-Complaints-To: usenet@blaine.gmane.org NNTP-Posting-Date: Thu, 5 Jul 2018 18:42:02 +0000 (UTC) Cc: Lars Ingebrigtsen , Paul Eggert , Eli Zaretskii , Jimmy Yuen Ho Wong , Emacs-Devel devel To: "Perry E. Metzger" Original-X-From: emacs-devel-bounces+ged-emacs-devel=m.gmane.org@gnu.org Thu Jul 05 20:41:57 2018 Return-path: Envelope-to: ged-emacs-devel@m.gmane.org Original-Received: from lists.gnu.org ([208.118.235.17]) by blaine.gmane.org with esmtp (Exim 4.84_2) (envelope-from ) id 1fb9CW-0006QQ-Ah for ged-emacs-devel@m.gmane.org; Thu, 05 Jul 2018 20:41:56 +0200 Original-Received: from localhost ([::1]:54388 helo=lists.gnu.org) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1fb9Ed-0007pP-5d for ged-emacs-devel@m.gmane.org; Thu, 05 Jul 2018 14:44:07 -0400 Original-Received: from eggs.gnu.org ([2001:4830:134:3::10]:34861) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1fb9ER-0007p6-Fn for emacs-devel@gnu.org; Thu, 05 Jul 2018 14:43:56 -0400 Original-Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1fb9EQ-0005PL-Gy for emacs-devel@gnu.org; Thu, 05 Jul 2018 14:43:55 -0400 Original-Received: from mail-oi0-x22f.google.com ([2607:f8b0:4003:c06::22f]:33911) by eggs.gnu.org with esmtps (TLS1.0:RSA_AES_128_CBC_SHA1:16) (Exim 4.71) (envelope-from ) id 1fb9EO-0005Ni-LL; Thu, 05 Jul 2018 14:43:52 -0400 Original-Received: by mail-oi0-x22f.google.com with SMTP id 13-v6so18810379ois.1; Thu, 05 Jul 2018 11:43:52 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:in-reply-to:references:from:date:message-id:subject:to :cc; bh=1QvYsRRDZ2ZzD6ndmw9dcM2i75WKZeGOToXbaEd3GSA=; b=soc78mAbFBPxgJG3tcPl946eNpUJqxzAF2dbi5URqWFImOq4upTI77qVStpln2f3m8 pZBp4Nkv5QccMar2BOevHCKVC2tWNsK9nvR8H8S0ZlyQxVwoCIarclHEB1bhcfOUbwcv eq91aV9yVBbUsYTn828Wgjj94YekVcbHxr5GsZvzYcpJoDMekABKDGAI1nC+sc66eU8/ rn+sl4iGXq/v8pAZEWB/x5ArCh86nAujhfFI4UIsL5N0itAjN+oRxbNXS903Gm8COIUE NDV3KS7huzI2nTeuHaFmxD2xSu2KAoVH5w2QWDpT1sfUsKFriRGGl1u7Tu4EF4L59US/ sA3g== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:in-reply-to:references:from:date :message-id:subject:to:cc; bh=1QvYsRRDZ2ZzD6ndmw9dcM2i75WKZeGOToXbaEd3GSA=; b=k4VUli3iDHJ3fIKeFDW1IHKumJCvo3HrWu0UxKcBsf+aKvbrJZ25/ZCR6syEQzFoyo VmqD9zlVmh5NfKaLSiIY7QOlWqMHxTkOwwGIfThCpvIHYp2ogK85lydztS95tf1jnIGH jnz4/4ByTe/HheAQH6eHimGZBnqId3nVxef4rdx2sWrHgBtOu43FCh8ZMnP7mHgRYUQH iOWm0Ygoa+PDHhIT0fqmcJOzUv7ZbcVfiweB/4cdGERuHGLkprHuf/JkY1PYg62I2ix1 QRysz5XYjmNCGTBVvPucpXP/I7W4y4M5bOOk2UGNqFeiivjUyZ82evWoEEttAXe84n05 2JVA== X-Gm-Message-State: APt69E0MBG7Ahi8YkIuW+4WdaxQfuzslx3Onygfu64/9VV2n2N4wDRLH QOh7mRe13bQcHiI4g6T3nzQEzlU/dgyZS4WaV2w= X-Google-Smtp-Source: AAOMgpe/zyxQ7AujflL7+5T+9sfe3qrY4QCNiZScG7PccdBVTGEAKJGWgTwjpVwfArri4VxbVgD8qu+rcCOxFczN7W4= X-Received: by 2002:aca:6a86:: with SMTP id f128-v6mr7473025oic.330.1530816231651; Thu, 05 Jul 2018 11:43:51 -0700 (PDT) Original-Received: by 2002:a4a:3b8d:0:0:0:0:0 with HTTP; Thu, 5 Jul 2018 11:43:50 -0700 (PDT) In-Reply-To: <20180705115259.4032dbea@jabberwock.cb.piermont.com> X-detected-operating-system: by eggs.gnu.org: Genre and OS details not recognized. X-Received-From: 2607:f8b0:4003:c06::22f X-BeenThere: emacs-devel@gnu.org X-Mailman-Version: 2.1.21 Precedence: list List-Id: "Emacs development discussions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: emacs-devel-bounces+ged-emacs-devel=m.gmane.org@gnu.org Original-Sender: "Emacs-devel" Xref: news.gmane.org gmane.emacs.devel:226967 Archived-At: On 5 July 2018 at 11:52, Perry E. Metzger wrote: > I would make sure that SHA-1 defenses are in place. The SHA-1 defenses are in master, but there is some problem with them: https://debbugs.gnu.org/cgi/bugreport.cgi?bug=31946#95 So did you mean "I would make sure [but I won't for lack of time/experience/etc]" or "I will make sure"?