Re: A couple of questions and concerns about Emacs network security

[Lars Ingebrigtsen]

Eli Zaretskii <address@hidden> writes:

>> But, yes, as Eli says, `paranoid' should perhaps do more for non-TLS
>> connections.  The question is "what", though, because there's no
>> fingerprint (beyond the host/port number) that we can use to verify
>> that a non-TLS connection is to a previously seen host.
>
> We could look at the browsers for inspiration, perhaps?

Hm...  I don't think I've seen any browsers offering anything like the
`paranoid' level, but I've only used the mainstream ones.  Perhaps
somebody else has experience with the high security forks of Firefox?
Or do I misremember?

-- 
(domestic pets only, the antidote for overdose, milk.)
   bloggy blog: http://lars.ingebrigtsen.no