Re: using GnuTLS 3.x and certificate checks

[Stefan Monnier]

> When interactive, you should be asked if you want to accept a SSL
> certificate unless your function pre-approves it.  So the default
> interactively is 'maybe-ask.  The other question is, if the user
> doesn't answer in 30 seconds, can we take that as a "no" answer?  I
> think the answer is "no, just wait for it."

By default it makes sense to prompt the user, and if she's not available
to reply, just wait until she is.  No need for any special functionality.

> When non-interactive, you can't be asked.  So the default there can be
> 'maybe-ask (what I describe in my question, and make it fail gracefully)
> or 'maybe-reject (unless pre-approved, reject).  It sounds like no one
> wants 'maybe-ask non-interactively.

In batch mode, prompting doesn't make much sense, so better default to
signal an error.


        Stefan