From mboxrd@z Thu Jan 1 00:00:00 1970 Path: news.gmane.org!.POSTED!not-for-mail From: Andy Moreton Newsgroups: gmane.emacs.devel Subject: Re: The netsec thread Date: Tue, 24 Jul 2018 19:21:58 +0100 Message-ID: References: <83bmb214ez.fsf@gnu.org> <837elq13me.fsf@gnu.org> <83h8kqwukq.fsf@gnu.org> <86zhyh7nli.fsf@gmail.com> <86pnzdrn8u.fsf@gmail.com> NNTP-Posting-Host: blaine.gmane.org Mime-Version: 1.0 Content-Type: text/plain X-Trace: blaine.gmane.org 1532456491 27952 195.159.176.226 (24 Jul 2018 18:21:31 GMT) X-Complaints-To: usenet@blaine.gmane.org NNTP-Posting-Date: Tue, 24 Jul 2018 18:21:31 +0000 (UTC) User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/27.0.50 (windows-nt) To: emacs-devel@gnu.org Original-X-From: emacs-devel-bounces+ged-emacs-devel=m.gmane.org@gnu.org Tue Jul 24 20:21:27 2018 Return-path: Envelope-to: ged-emacs-devel@m.gmane.org Original-Received: from lists.gnu.org ([208.118.235.17]) by blaine.gmane.org with esmtp (Exim 4.84_2) (envelope-from ) id 1fi1w6-0007A1-VO for ged-emacs-devel@m.gmane.org; Tue, 24 Jul 2018 20:21:27 +0200 Original-Received: from localhost ([::1]:41976 helo=lists.gnu.org) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1fi1yD-00046r-RG for ged-emacs-devel@m.gmane.org; Tue, 24 Jul 2018 14:23:37 -0400 Original-Received: from eggs.gnu.org ([2001:4830:134:3::10]:37410) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1fi1wp-000456-HD for emacs-devel@gnu.org; Tue, 24 Jul 2018 14:22:12 -0400 Original-Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1fi1wl-0007wU-II for emacs-devel@gnu.org; Tue, 24 Jul 2018 14:22:11 -0400 Original-Received: from [195.159.176.226] (port=54758 helo=blaine.gmane.org) by eggs.gnu.org with esmtps (TLS1.0:RSA_AES_128_CBC_SHA1:16) (Exim 4.71) (envelope-from ) id 1fi1wl-0007vg-96 for emacs-devel@gnu.org; Tue, 24 Jul 2018 14:22:07 -0400 Original-Received: from list by blaine.gmane.org with local (Exim 4.84_2) (envelope-from ) id 1fi1ub-0005Ly-BO for emacs-devel@gnu.org; Tue, 24 Jul 2018 20:19:53 +0200 X-Injected-Via-Gmane: http://gmane.org/ Original-Lines: 27 Original-X-Complaints-To: usenet@blaine.gmane.org Cancel-Lock: sha1:QJVFUqG0TibwEJwS/r8GEruykoQ= X-detected-operating-system: by eggs.gnu.org: GNU/Linux 2.2.x-3.x [generic] [fuzzy] X-Received-From: 195.159.176.226 X-BeenThere: emacs-devel@gnu.org X-Mailman-Version: 2.1.21 Precedence: list List-Id: "Emacs development discussions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: emacs-devel-bounces+ged-emacs-devel=m.gmane.org@gnu.org Original-Sender: "Emacs-devel" Xref: news.gmane.org gmane.emacs.devel:227777 Archived-At: On Tue 24 Jul 2018, Jimmy Yuen Ho Wong wrote: > On Tue, Jul 24, 2018 at 1:09 PM, Noam Postavsky wrote: >> On 24 July 2018 at 07:54, Andy Moreton wrote: >> >>> Something is broken in read-multiple-choice if it shows "Continue >>> connecting?" that many times (also hinted at by the triggering of >>> frequent garbage collections). >> >> I've opened Bug#32257 for this. >> >> https://debbugs.gnu.org/cgi/bugreport.cgi?bug=32257 >> > > Regardless of the issue in rmc, NSM probably shouldn't even pop up a > modal in certain applications like Gnus and EWW when one document may > trigger multiple TLS connections. This is where we should take a page > from the browsers and email clients. For Gnus, introduce an option to > stop the downloading of images in HTML emails, so the sender cannot > track you. For email and EWW, if the TLS connections to load the > assets of the same email or webpage are insecure, do not even prompt, > but put something like [insecure content] in the mode line. No, give people the option to control which sites are accessed at all, for privacy as well as security (like an ad-blocker). AndyM