Re: NSM certificate prompt

[Eli Zaretskii]

> From: Simon Leinen <address@hidden>
> Date: Fri, 19 Dec 2014 20:53:31 +0100
> Cc: Eli Zaretskii <address@hidden>, address@hidden
> 
> On Fri, Dec 19, 2014 at 1:14 PM, Lars Ingebrigtsen <address@hidden> wrote:
> > To the best of my knowledge, no other browsers use the system's
> > certificates.
> 
> I am forced to use Mac OS X at work. (Yes, I know, I should look for
> another job.)  All browsers *except* for Firefox do use the system's
> certificate store ("Keychain").  This makes it quite convenient for
> the user to manage which kinds of certificates she wants to trust. I'd
> like Emacs' emerging TLS support to be able to access the same.

It already does -- assuming that GnuTLS on OS X reads that store when
we call the gnutls_certificate_set_x509_system_trust function.  If
not, then you should lobby the GnuTLS developers to make GnuTLS do
that on OS X.