Re: A couple of questions and concerns about Emacs network security

[Eli Zaretskii]

> From: Jimmy Yuen Ho Wong <address@hidden>
> Date: Sun, 24 Jun 2018 19:29:24 +0100
> Cc: Eli Zaretskii <address@hidden>, Noam Postavsky <address@hidden>, Paul 
> Eggert <address@hidden>, 
>       address@hidden
> 
> Emacs has a defined list of CA bundle PEM files (`gnutls-trustfiles`) it 
> looks for now, the same can be
> done for CRL files. Users can periodically update their CA bundle and CRL 
> bundle.

On my system, GnuTLS uses HAVE_GNUTLS_X509_SYSTEM_TRUST, and
gnutls-trustfiles is not used.  The "system trust" is updated whenever
the system is updated.  I think this is a better arrangement than
asking users to maintain their bundles.