[Top][All Lists]

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: Network security manager

From: Ted Zlatanov
Subject: Re: Network security manager
Date: Tue, 18 Nov 2014 12:23:27 -0500
User-agent: Gnus/5.130012 (Ma Gnus v0.12) Emacs/25.0.50 (gnu/linux)

On Tue, 18 Nov 2014 18:00:15 +0100 Lars Magne Ingebrigtsen <address@hidden> 

LMI> I just had an interesting user interface experience.
LMI> eww loads images asynchronously, and one of the images that it tried to
LMI> fetch had an invalid certificate, so the NSM queried me about this
LMI> certificate.  Which was kinda surprising, since I was in the middle of
LMI> typing something else...

LMI> I see at least two ways of dealing with this:

LMI> 1) Drop certificate checking for images in shr.  I mean, do we care?

I think we care.

LMI> 2) If being run from the async context (how do we check for that?),
LMI> refuse to handle insecure TLS connections silently.

Works for me, as long as the errors are reviewable in the NSM.  I should
be able to go somewhere and hit a button "allow this cert from now on".


reply via email to

[Prev in Thread] Current Thread [Next in Thread]