Re: A couple of questions and concerns about Emacs network security

[Lars Ingebrigtsen]

Eli Zaretskii <address@hidden> writes:

>> Users aren't supposed to care about that variable, anyway, since the NSM
>> warns about less than 1024 bits...
>
> Yes, but what if GnuTLS bumps the default to more than that?  And even
> if not, I think I might like to know how far below 1024 I'm going to
> be if I allow the connection.

The NSM will say explicitly how many bits the DH exchange is using.  Try
this one with `M-x eww'

https://dh480.badssl.com/

and you should get the warning.

-- 
(domestic pets only, the antidote for overdose, milk.)
   bloggy blog: http://lars.ingebrigtsen.no