Re: Network Security Manager merge time?

[Lars Magne Ingebrigtsen]

Ted Zlatanov <address@hidden> writes:

> I'd rather deprecate it in favor of `nsm-security-level', especially if
> you're OK with the ability to set the level per host or subnet, and per
> service. The `gnutls-verify-error' checks are all 'medium I think.

I can imagine that some people would rather leave all this up to
gnutls...

> (And I'd name or alias that NSM variable to `network-security-level'
> because "nsm" means nothing to a new user, assuming NSM will be loaded
> by default.)

Yes.

> (Oh, and I'd make `nsm-save-host-names' t by default, because your
> worries about information leakage are in the 'high or above security
> level IMO :)

Heh.  But ssh has the same paranoid defaults, I think.

-- 
(domestic pets only, the antidote for overdose, milk.)
   bloggy blog: http://lars.ingebrigtsen.no