Re: A couple of questions and concerns about Emacs network security

[Stephen Berman]

On Sat, 07 Jul 2018 16:22:15 +0300 Eli Zaretskii <address@hidden> wrote:

>> From: Stephen Berman <address@hidden>
>> Cc: Eli Zaretskii <address@hidden>,  address@hidden,  address@hidden
>> Date: Sat, 07 Jul 2018 14:22:54 +0200
>> 
>> On Sat, 07 Jul 2018 09:15:32 +0200 martin rudalics <address@hidden> wrote:
>> 
>> >>>            And the users who have made such a setting don't need the
>> >>> defaults to change anyway.
>> >>
>> >> No, but it's the new users who would benefit.
>> >
>> > Shouldn't new users face such changes with major releases only?
>> 
>> Since this is a security-related change, it depends on the maintainers'
>> judgment of the risks (both of making the change and of not making it).
>
> When making these judgment calls, are we allowed to apply the same
> principle as you did, namely that the current situation "has been
> tested for at least five years", and therefore we can conclude that no
> urgent change is needed?

If I were in a position to allow or forbid you anything, I would
certainly allow you that.

Steve Berman