#3916: Mutt 1.8: TOFU approach bails out on first fail or reject, not offering higher links of the cert' chain --------------------------+---------------------- Reporter: kratem32 | Owner: mutt-dev Type: enhancement | Status: new Priority: minor | Milestone: 1.8 Component: crypto | Version: Resolution: | Keywords: tofu --------------------------+----------------------
Comment (by kratem32): It may be a naive idea but how about this: Use a configuration variable that simply automatically skips the "unknown certificate" prompt. When the variable is unset the behavior is like it is now with the latest patch and the user can choose the certificate that is to be trusted. Afterwards the variable is set and there is no prompt/warning unless the specified file does not contain a valid certificate. When the certificate warning is skipped and including the last one and no valid certificate is found the connection is aborted. I feel like a simple way to skip the certificate warning prompt is all that is needed once the certificate is in place. -- Ticket URL: <https://dev.mutt.org/trac/ticket/3916#comment:38> Mutt <http://www.mutt.org/> The Mutt mail user agent