Re: A couple of questions and concerns about Emacs network security

[Noam Postavsky]

On 22 June 2018 at 18:43, Paul Eggert <address@hidden> wrote:
> On 06/22/2018 03:00 PM, Jimmy Yuen Ho Wong wrote:
>>
>> 1. Can we update the default network security settings?
>
>
> Yes, I would think so, in the master branch. As you say, the current
> defaults are inappropriate for today's users.

Can we bump gnutls-min-prime-bits to 1024 on the release branch? I
know it has a reference to Bug#11267 which describes some mail server
that works only with 256 bits primes, but surely people using such
software can set the option themselves. I mean, a 256 bit DH prime is
just a toy example, not real crypto. It's inappropriate for
yesterday's users. Even 1024 is probably a bit low, but at least it's
something.