From mboxrd@z Thu Jan 1 00:00:00 1970 Path: news.gmane.org!not-for-mail From: Lars Magne Ingebrigtsen Newsgroups: gmane.emacs.devel Subject: Re: Network security manager Date: Mon, 17 Nov 2014 16:22:57 +0100 Message-ID: References: <87wq6uj5gt.fsf@lifelogs.com> <87k32tkh1x.fsf@lifelogs.com> NNTP-Posting-Host: plane.gmane.org Mime-Version: 1.0 Content-Type: text/plain X-Trace: ger.gmane.org 1416237835 11554 80.91.229.3 (17 Nov 2014 15:23:55 GMT) X-Complaints-To: usenet@ger.gmane.org NNTP-Posting-Date: Mon, 17 Nov 2014 15:23:55 +0000 (UTC) To: emacs-devel@gnu.org Original-X-From: emacs-devel-bounces+ged-emacs-devel=m.gmane.org@gnu.org Mon Nov 17 16:23:49 2014 Return-path: Envelope-to: ged-emacs-devel@m.gmane.org Original-Received: from lists.gnu.org ([208.118.235.17]) by plane.gmane.org with esmtp (Exim 4.69) (envelope-from ) id 1XqO9c-0006gU-0j for ged-emacs-devel@m.gmane.org; Mon, 17 Nov 2014 16:23:48 +0100 Original-Received: from localhost ([::1]:48404 helo=lists.gnu.org) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1XqO9b-00051x-Ka for ged-emacs-devel@m.gmane.org; Mon, 17 Nov 2014 10:23:47 -0500 Original-Received: from eggs.gnu.org ([2001:4830:134:3::10]:59456) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1XqO9E-0004qj-9m for emacs-devel@gnu.org; Mon, 17 Nov 2014 10:23:29 -0500 Original-Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1XqO98-0001XS-S9 for emacs-devel@gnu.org; Mon, 17 Nov 2014 10:23:24 -0500 Original-Received: from hermes.netfonds.no ([80.91.224.195]:36313) by eggs.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1XqO98-0001XD-MW for emacs-devel@gnu.org; Mon, 17 Nov 2014 10:23:18 -0500 Original-Received: from cm-84.215.51.58.getinternet.no ([84.215.51.58] helo=stories.gnus.org) by hermes.netfonds.no with esmtpsa (TLS1.0:DHE_RSA_AES_128_CBC_SHA1:16) (Exim 4.72) (envelope-from ) id 1XqO8o-0007vZ-6u for emacs-devel@gnu.org; Mon, 17 Nov 2014 16:22:58 +0100 Face: iVBORw0KGgoAAAANSUhEUgAAADAAAAAwBAMAAAClLOS0AAAAG1BMVEX1tEnBGAbgbySWAACT AACuAwCYAACVAADNNw9GWJ9RAAACY0lEQVQ4jV2TQYvbMBCF1cBCjqsFQY6JoJBrkSufi4V1XQXG 5Lore9y7TXxdG7boZ3ckOdu4Y0jw+zwjaTSP7aQMnOKwSMZ28swBoPHGpJeZQJAJBAGA2BI4MiZD 4IcE6BsBDeK4gnOgkPIYc6NemgyoAMUiaYFUSJk7iBk8zLPABlBrk4DMCZx3AtqqznUiWI5puwIE GMAR/biCEDeyRluYek0wDHjSmg7BPAaLajqRwS3AHHXdVlswkerRF6YYt8ASKPOZtkATUBq3nxtd EPA4KCpFMU1ZrhS2BEq02qtB+1HnjVW0as8U+nqsSqU9FqipolU16SPziLawY6ULa+JFqEFZVIVh pirTwnb9GcopSexxL0NppkGVxvotUIp2NWk9jnEYHvTccVp6nB6AtapMq1SoRrvJyIfvS2rRI6jW pvQ33d9s8QWqYTSpLcNwa7Vv/wFftm38r2/YI/blHVDbCjo7XTqpWlATzZCK06svfrWo+wYbdF3P zJQbSpOpfmKHCAjde6NZ3qXNN//nRwfv9LwJZOl2iilmvOHp95VfxcXBp6M7p1bWfQMNXIFfxOUq HBczxPEpjNY0cuA+X65Pr87RtB4INHRfXUfTe4Lvr/DkAhWiIWQddg12EBYCp4vYw0ylIgDo6OGL 5Hu+fxFSEHARuE9wLlr2eb87LfzC85ATcOCel/N5t5DTZu44fU6+cGwJH+z48W0+L4FcPacEWiWw GB8LeY1K82QtcGTuDNg5mcplazlydjQ9xexoY/dwSxaTDHgHVH3VJWSzfen3hORLam2XZB4y2MnV g+Xtf/AX9+hDfBmmHOoAAAAASUVORK5CYII= X-Now-Playing: The Cure's _Kiss Me, Kiss Me, Kiss Me_ X-Hashcash: 1:23:141117:emacs-devel@gnu.org::4h8sfilRPXFTCdG1:000000000000000000000000000000000000000000PPYe In-Reply-To: <87k32tkh1x.fsf@lifelogs.com> (Ted Zlatanov's message of "Mon, 17 Nov 2014 10:00:58 -0500") User-Agent: Gnus/5.130012 (Ma Gnus v0.12) Emacs/25.0.50 (gnu/linux) X-MailScanner-ID: 1XqO8o-0007vZ-6u MailScanner-NULL-Check: 1416842579.40722@KOkj5WW1xS7ROpxcNit6iA X-detected-operating-system: by eggs.gnu.org: Genre and OS details not recognized. X-Received-From: 80.91.224.195 X-BeenThere: emacs-devel@gnu.org X-Mailman-Version: 2.1.14 Precedence: list List-Id: "Emacs development discussions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: emacs-devel-bounces+ged-emacs-devel=m.gmane.org@gnu.org Original-Sender: emacs-devel-bounces+ged-emacs-devel=m.gmane.org@gnu.org Xref: news.gmane.org gmane.emacs.devel:177419 Archived-At: Ted Zlatanov writes: > I don't know how complicated it will be internally, but I don't think it > will endanger any existing functionality (except TLS connections, of > course). Let's say you fetch mail from pop3 from a server that has a self-signed certificate as a batch job. The network security manager will say "The server uses a self-signed certificate, so Emacs can't verify the authenticity of the server. Connect anyway? (no, this session only, always)" (or something like that). But since it's a batch job, we can't ask the user, and the connection will fail. (Unless we decide to have the batch default be the opposite -- always answer "this session only".) So perhaps it's better for Emacs 25.1? Especially if we can release 25.1 in a timely manner. >"? -- (domestic pets only, the antidote for overdose, milk.) bloggy blog: http://lars.ingebrigtsen.no