Re: A couple of questions and concerns about Emacs network security

[Lars Ingebrigtsen]

OK, I've now read the original email message, and there seems to be a
fundamental misunderstanding.

Network security management is done by nsm.el, not by the underlying
libraries.  The NSM provides, as the name implies, network security, and
does stuff like certificate pinning and warns you if a STARTTLS
connection has degraded to a non-TLS connection (which, of course, the
gnutls.el functions can't do on its own).

Perhaps the doc strings of gnutls.el should mention that the variables
is provides are useful only if you don't use `open-network-stream' and
call the low-level functions directly...

-- 
(domestic pets only, the antidote for overdose, milk.)
   bloggy blog: http://lars.ingebrigtsen.no