Re: [PATCH RFC] GnuTLS: Support TOFU certificate checking.

[Ted Zlatanov]

On Wed, 08 Oct 2014 16:09:20 +0200 Lars Magne Ingebrigtsen <address@hidden> 
wrote: 

LMI> I don't see why the application would need to know much, if anything,
LMI> about it.  `open-network-stream' would say "Invalid certificate.  (Bla
LMI> bla.)  Connect anyway?" and the user would type `y' or `n'.

LMI> I can't really see how that would disturb smtpmail, Gnus, nnimap, pop3,
LMI> rmail, erc or any other application I can think of...

What about `emacs --batch'? That change would affect the URL retrieval
code and thus unattended package installs for instance. Do you just
reject certificates in batch mode? Or add a `--tofu-accept=SERVER_REGEX'
option to Emacs for batch mode?

Ted