[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: poodle

On October 16, 2014, [Wanderlust English:05805], jch (at pps.univ-paris-diderot.fr) wrote:
> However, the built-in support is insecure in Emacs 24.3 (it trusts all
> certificates).  This should be fixed in 24.4.

See also emacs-24.4/etc/NEWS (emacs-24.4-rc1):

    ** New option `gnutls-verify-error', if non-nil, means that Emacs
    should reject SSL/TLS certificates that GnuTLS determines as invalid.
    (This option defaults to nil at present, but this is expected to change
    in a future release.)

Thanks,
-- 
Tatsuya Kinoshita