GNU bug report logs - #17338
Bug#745553: emacs24-el: mml2015-always-trust should default to nil, not t

Previous Next

Packages: emacs, gnus;

Reported by: Rob Browning <rlb <at> defaultvalue.org>

Date: Fri, 25 Apr 2014 01:45:01 UTC

Severity: normal

Tags: security

Merged with 17391

Done: Lars Ingebrigtsen <larsi <at> gnus.org>

Bug is archived. No further changes may be made.

Full log


View this message in rfc822 format

From: Lars Ingebrigtsen <larsi <at> gnus.org>
To: Daniel Kahn Gillmor <dkg <at> fifthhorseman.net>
Cc: 745553 <at> bugs.debian.org, 17338 <at> debbugs.gnu.org, 745553-forwarded <at> bugs.debian.org, 17391 <at> debbugs.gnu.org, Jens Lechtenboerger <jens.lechtenboerger <at> fsfe.org>, rlb <at> defaultvalue.org
Subject: bug#17338: bug#17391: Bug#745553: emacs24-el: mml2015-always-trust should default to nil, not t
Date: Wed, 25 Jan 2017 18:19:35 +0100
Daniel Kahn Gillmor <dkg <at> fifthhorseman.net> writes:

> So in the scenario above, Bob's cert is still overall valid (because it
> has a valid certification over the correct UserID+key from Alice), even
> though the carol <at> example.org UserID is invalid.
>
> I don't know mml-mode or elisp well enough to dig into the code and fix
> this part of the problem quickly, but if someone has patches that i can
> look at that would point to where it might be changed, i'd be happy to
> try to review them.

I'm also mostly unfamiliar with the mml encryption code, but perhaps
Jens could take a peek at this?

-- 
(domestic pets only, the antidote for overdose, milk.)
   bloggy blog: http://lars.ingebrigtsen.no




This bug report was last modified 3 years and 127 days ago.

Previous Next


GNU bug tracking system
Copyright (C) 1999 Darren O. Benham, 1997,2003 nCipher Corporation Ltd, 1994-97 Ian Jackson.