Re: Bug#766395: emacs/gnus: Uses s_client to for SSL.

[Richard Stallman]

[[[ To any NSA and FBI agents reading my email: please consider    ]]]
[[[ whether defending the US Constitution against all enemies,     ]]]
[[[ foreign or domestic, requires you to follow Snowden's example. ]]]

    Yes, I'm very concerned that we will turn on GnuTLS verification and
    make the priority string more strict, and users will conclude Emacs is
    broken.  Then we'll see the advice "oh just go back to s_client and
    you'll be fine."

This could happen if users don't understand the issue.

Is it feasible to warn users about this
whenever it is about to fall back to SSL3 in cases where that would
cause a danger?

-- 
Dr Richard Stallman
President, Free Software Foundation
51 Franklin St
Boston MA 02110
USA
www.fsf.org  www.gnu.org
Skype: No way! That's nonfree (freedom-denying) software.
  Use Ekiga or an ordinary phone call.