Subject: Re: bug#29978: wishlist: gnutls-verify-error needs a 'ask mode
From: Robert Pluim <[email-masked]>
To: Andreas Schwab <[email-masked]>
Cc: [email-masked]
Date: Thu, 04 Jan 2018 17:46:36 +0100
List-Id: <debbugs-submit.debbugs.gnu.org>

Robert Pluim <[email-masked]> writes:

> Andreas Schwab <[email-masked]> writes:
>
>> On Jan 04 2018, Robert Pluim <[email-masked]> wrote:
>>
>>> Verification using gnutls-verify-error is currently an either-or
>>> proposition: if the verification fails, there's no fallback. Typical
>>> browser implementations allow querying the user for the desired
>>> action, emacs should allow something similar.
>>
>> Isn't that what NSM is about?
>
> NSM doesn't currently come into play until gnutls.c has finished
> setting up the TLS connection. Since gnutls.c is the one doing the
> verification, by then it's too late.

Umm, nevermind. I hadn't realized nsm already implemented these
checks. Closing.