Re: A couple of questions and concerns about Emacs network security

[Eli Zaretskii]

> From: Lars Ingebrigtsen <address@hidden>
> Date: Sun, 08 Jul 2018 16:06:39 +0200
> Cc: Emacs-Devel devel <address@hidden>
> 
> But, yes, as Eli says, `paranoid' should perhaps do more for non-TLS
> connections.  The question is "what", though, because there's no
> fingerprint (beyond the host/port number) that we can use to verify
> that a non-TLS connection is to a previously seen host.

We could look at the browsers for inspiration, perhaps?

> 3) emacs -Q should ignore the NSM settings (and not save anything)

Agreed.

> Other than that, I'm just waiting for Jimmy's code to show up in an
> Emacs branch, and I'll probably have more comments.

Thanks.