Re: A couple of questions and concerns about Emacs network security

[Jimmy Yuen Ho Wong]

Hi All,

I've just pushed a "netsec" branch to Savannah. Here's a summary of the changes:

* Ability to specify a bunch of CRL PEM files on your system for
GnuTLS to verify against
* Set the standard value of `gnutls-min-prime-bits` to nil so GnuTLS
can do its thing using its own default
* Completely revamped NSM checks - many new checks and bug fixes,
please see the commit diff for details
* New `nsm-trust-local-network` option to bypass implicitly trusted
NSM checks on local networks
* Revamped NSM prompt - full certificate chain details now available,
summary is also more useful now

Planned TODOs:

* OCSP
* Update NEWS and the manual

Please help me test the **** of out this branch with all kinds of
networks, OSes and servers.

Thank you so much!
On Sat, Jul 14, 2018 at 7:37 AM Eli Zaretskii <address@hidden> wrote:
>
> > From: Jimmy Yuen Ho Wong <address@hidden>
> > Date: Fri, 13 Jul 2018 21:50:41 +0100
> > Cc: Ted Zlatanov <address@hidden>, Paul Eggert <address@hidden>, 
> > address@hidden,
> >       "Perry E. Metzger" <address@hidden>, Lars Ingebrigtsen 
> > <address@hidden>,
> >       Emacs-Devel devel <address@hidden>
> >
> > Just got confirmation that my paperwork had been signed by all
> > parties. Set me up?
>
> Yes, your name i now on file.  But I see you didn't request membership
> in the emacs project, or maybe I don't recognize your user name among
> those who did.  You need to request membership, and then I can approve
> you, which gives you write access to the repository.
>