Re: [PATCH RFC] GnuTLS: Support TOFU certificate checking.

[Ted Zlatanov]

On Thu, 09 Oct 2014 11:43:49 +0900 "Stephen J. Turnbull" <address@hidden> 
wrote: 

SJT> (2) All data received is squirreled away in a buffer inaccessible to
SJT>     Emacs (except for the code that will eventually move it to Lisp,
SJT>     of course), and this buffer is "read-locked" until permission is
SJT>     received from the user.

I don't think that kind of secure storage and authorization layering is
available in today's Emacs. It would be nice to have it for general
passwords as well. You can sort of hide data from casual dumping by
wrapping it in a closure, but unauthorized code can still extract it
easily.

Ted