Re: The netsec thread

[Robert Pluim]

(I removed 'mouse' from Lars' email address)

>>>>> On Fri, 23 Aug 2019 15:18:46 +0300, Eli Zaretskii <address@hidden> said:

    >> From: Robert Pluim <address@hidden>
    >> Cc: Lars Ingebrigtsen <address@hidden>,  address@hidden
    >> Date: Fri, 23 Aug 2019 11:40:44 +0200
    >> 
    Eli> If there are any specific changes in behavior due to this
    Eli> "tightening", we should consider them for NEWS.
    >> 
    >> I think those were noted in the changes to NEWS brought in from the
    >> branch. I *could* add something like this as well, although I really
    >> am not in favour of advertising the feature too much, hence the
    >> shouting:
    >> 
    >> +++
    >> ** New user option 'nsm-trust-local-network'.
    >> Allows skipping Network Security Manager checks for hosts on your
    >> local subnet(s).  DEFAULTS TO NIL.  There is a good reason for that,
    >> ensure you know what you are doing before you change it.

    Eli> I don't believe in "security by obscurity", so I think this should be
    Eli> in NEWS.  Especially since it's in the manual.

I said 'not advertise too much', not 'no documentation' (and itʼs not
in the manual).

    Eli> I would suggest a
    Eli> slight rephrase, though:

    Eli>   +++
    Eli>   ** New user option 'nsm-trust-local-network'.
    Eli>   Allows skipping Network Security Manager checks for hosts on your
    Eli>   local subnet(s).  It defaults to nil.  Usually, there should be no
    Eli>   need to set this non-nil, and doing that risks opening your local
    Eli>   network connections to attacks.  So be sure you know what you are
    Eli>   doing before changing the value.

Sure. Iʼll give it a few days for people to wordsmith it some more.

Robert