GNU bug report logs - #29978
wishlist: gnutls-verify-error needs a 'ask mode

Previous Next

Full log

Message #14 received at 29978-done <at> debbugs.gnu.org (full text, mbox):

From: Robert Pluim <rpluim <at> gmail.com>
To: Andreas Schwab <schwab <at> suse.de>
Cc: 29978-done <at> debbugs.gnu.org
Subject: Re: bug#29978: wishlist: gnutls-verify-error needs a 'ask mode
Date: Thu, 04 Jan 2018 17:46:36 +0100

Robert Pluim <rpluim <at> gmail.com> writes:

> Andreas Schwab <schwab <at> suse.de> writes:
>
>> On Jan 04 2018, Robert Pluim <rpluim <at> gmail.com> wrote:
>>
>>> Verification using gnutls-verify-error is currently an either-or
>>> proposition: if the verification fails, there's no fallback. Typical
>>> browser implementations allow querying the user for the desired
>>> action, emacs should allow something similar.
>>
>> Isn't that what NSM is about?
>
> NSM doesn't currently come into play until gnutls.c has finished
> setting up the TLS connection. Since gnutls.c is the one doing the
> verification, by then it's too late.

Umm, nevermind. I hadn't realized nsm already implemented these
checks. Closing.

Previous Next

GNU bug tracking system
Copyright (C) 1999 Darren O. Benham, 1997,2003 nCipher Corporation Ltd, 1994-97 Ian Jackson.