Re: Additional network security

[Stephen J. Turnbull]

Ted Zlatanov writes:
 > On Sun, 07 Dec 2014 14:35:30 +0900 "Stephen J. Turnbull" <address@hidden> 
 > wrote: 
 > 
 > SJT> Stefan Monnier writes:
 > >> > GnuTLS doesn't really set policy here; that's up to the application.
 > >> 
 > >> Damn!
 > 
 > SJT> Welcome to the wild world of security.  Can't if you do, damned if you
 > SJT> don't.
 > 
 > Fortunately, it's not up to the application either. The user can choose
 > their policy:

That's merely an even more virulent version of the problem that
bothers Stefan: folks who are not security specialists are making this
very complex decisions.

I don't think there's anything that can be done about it; it's just
hard.