Re: Emacs RPC security

[Stefan Monnier]

> I already mentioned that given GnuTLS, we can associate client-side SSL
> certificates with particular functions, so we authenticate on the
> certificates and authorize based on the (certificate, function)
> combination.  This seems to me much better, even if "orthogonal," than
> the current "come visit my server and run anything you like" approach.

I think this is pushing server.el where it shouldn't go.  It's not meant
as "Emacs as a server for whichever network service you can think of",
but just "use your own Emacs from other processes".  If you want your
Emacs to offer services to various users (rather than just to yourself),
then you'll want to implement your own (probably based on GNUtls).


        Stefan