Re: using GnuTLS 3.x and certificate checks

[Ted Zlatanov]

On Sun, 19 May 2013 18:59:01 -0400 Ted Zlatanov <address@hidden> wrote: 

TZ> On Sun, 19 May 2013 20:34:15 +0100 (BST) Christopher Schmidt 
<address@hidden> wrote: 
CS> Ted Zlatanov <address@hidden> writes:
>>> I like your idea, the problem is that often it will be triggered at
>>> very inconvenient times.  Emacs, unlike most other environments with
>>> this capability, doesn't deal well with interrupting network I/O to
>>> ask the user questions... not to mention the TCP exchange itself could
>>> be aborted, or the whole thing could be running unattended (--batch
>>> for example).

CS> I think a verification mechanism should run unattended without user
CS> interaction whatsoever.  What's your use case for an interactive
CS> verification snippet?

TZ> How else could a user accept a previously unknown certificate?

Ping?  Any ideas?

Ted