Re: Network security manager

[Ted Zlatanov]

On Mon, 17 Nov 2014 10:00:58 -0500 Ted Zlatanov <address@hidden> wrote: 

TZ> On Mon, 17 Nov 2014 09:17:19 -0500 Stefan Monnier <address@hidden> wrote: 
>>>> Feature branch or emacs-24 please.  It should be applicable to
>>>> emacs-24, and the maintainers have requested we work against emacs-24 in
>>>> those cases, forward-porting the changes into master.
>>> I don't think emacs-24 is supposed to receive new features, only bug
>>> fixes.

SM> Indeed.  I could consider including it in a 24.5 release because it's
SM> a somewhat important issue, but it would have to be "obviously safe"
SM> (in the sense of "won't break anything").  That sounds fairly unlikely.

TZ> I don't know how complicated it will be internally, but I don't think it
TZ> will endanger any existing functionality (except TLS connections, of
TZ> course). The only reason for it in 24.x is to add reasonable certificate
TZ> handling so we can turn on certificate verification by default. I don't
TZ> think it can be done otherwise without seriously damaging the user
TZ> experience.

TZ> Would you rather not make those changes in 24.x?

BTW, I proposed using emacs-24 3 weeks ago in the thread "removing SSLv3
support by default from the Emacs GnuTLS integration (was: Bug#766395:
emacs/gnus: Uses s_client to for SSL.)" you can find here
https://lists.gnu.org/archive/html/emacs-devel/2014-10/msg00936.html

There were no comments or objections. Sorry if I didn't ping people back
then. I assumed it was a reasonable proposal and everyone was nodding
agreement into their beards...

Ted