[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: Bug#766395: emacs/gnus: Uses s_client to for SSL.
|
From: |
Lars Ingebrigtsen |
|
Subject: |
Re: Bug#766395: emacs/gnus: Uses s_client to for SSL. |
|
Date: |
Sun, 21 Feb 2016 13:47:45 +1100 |
|
User-agent: |
Gnus/5.13 (Gnus v5.13) Emacs/25.1.50 (gnu/linux) |
Kurt Roeckx <address@hidden> writes:
> From what I understand, it is (or was) possible to configure
> things in such a way that it uses s_client to set up SSL, even
> when it's configured to use gnutls. You should never use s_client
> for that. s_client is a debug tool. It does create an SSL
> connection for you, but in an insecure way.
Emacs has built-in TLS support these days, so s_client is only used if
the user (for some weird reason or other) has built or installed a
version of Emacs without TLS support.
I think that should probably be removed, because it's less secure than
users would expect.
--
(domestic pets only, the antidote for overdose, milk.)
bloggy blog: http://lars.ingebrigtsen.no