Re: more on starttls, gnutls-cli and using tls for mail

[Chong Yidong]

"T. V. Raman" <address@hidden> writes:

> In function
> (defun network-stream-open-starttls (name buffer host service
> parameters)
> the following let binding forces gnutls-cli -- even though
> starttls-use-gnutls has been set to nil earlier because
> gnutls-cli ws not found on the system.
> (let* ((starttls-use-gnutls t)

Could you elaborate?  That code branch should not be called unless
builtin gnutls is not available:

  (let* (...
         (builtin-starttls (and (fboundp 'gnutls-available-p)
                                (gnutls-available-p)))
      ...
      (unless builtin-starttls
        (delete-process stream)
        (setq start (with-current-buffer buffer (point-max)))
        (let* ((starttls-use-gnutls t)
          ...

> Also, if you ask smtpmail to save the security settings, it
> creates a world-readable .authinfo with the password stored in
> the clear --- looks like a bad idea on all counts.

Yes, this should be fixed.