Re: A couple of questions and concerns about Emacs network security

[martin rudalics]

>> Shouldn't new users face such changes with major releases only?
>
> Since this is a security-related change, it depends on the maintainers'
> judgment of the risks (both of making the change and of not making it).

If a security-related change is about fixing an imminent risk, we
should apply it in the next release or even make a special release for
it.  If a security-related change is about setting and presenting a
security measure to users, it should be given as much prior testing as
possible.  Otherwise, we risk that too many new users get annoyed by
improper security settings and switch them off.  Which is probably not
what we wanted in the first place.

martin