[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
bug#29978: wishlist: gnutls-verify-error needs a 'ask mode
|
From: |
Robert Pluim |
|
Subject: |
bug#29978: wishlist: gnutls-verify-error needs a 'ask mode |
|
Date: |
Thu, 04 Jan 2018 17:46:36 +0100 |
|
User-agent: |
Gnus/5.13 (Gnus v5.13) Emacs/26.0.90 (gnu/linux) |
Robert Pluim <rpluim@gmail.com> writes:
> Andreas Schwab <schwab@suse.de> writes:
>
>> On Jan 04 2018, Robert Pluim <rpluim@gmail.com> wrote:
>>
>>> Verification using gnutls-verify-error is currently an either-or
>>> proposition: if the verification fails, there's no fallback. Typical
>>> browser implementations allow querying the user for the desired
>>> action, emacs should allow something similar.
>>
>> Isn't that what NSM is about?
>
> NSM doesn't currently come into play until gnutls.c has finished
> setting up the TLS connection. Since gnutls.c is the one doing the
> verification, by then it's too late.
Umm, nevermind. I hadn't realized nsm already implemented these
checks. Closing.