Bug#766397: Bug#766395: emacs/gnus: Uses s_client to for SSL.

2014-10-24 Thread Ted Zlatanov
On Thu, 23 Oct 2014 10:57:17 -0500 Rob Browning wrote: RB> Ted Zlatanov writes: >> could you provide a test case? The information gathered by >> `M-x report-emacs-bug' would be really helpful, too. RB> Hmm, I'm not the original reporter, and don't yet d

Bug#766397: Bug#766395: emacs/gnus: Uses s_client to for SSL.

2014-10-24 Thread Ted Zlatanov
On Thu, 23 Oct 2014 12:34:38 -0400 Richard Stallman wrote: RS> I've read that falling back to ssl3 is a real security hole, RS> being exploited frequently. That feature should be removed. That's not really relevant to the bug report, but with GnuTLS you use priority strings to control this. N

Bug#766397: Bug#766395: emacs/gnus: Uses s_client to for SSL.

2014-10-23 Thread Ted Zlatanov
On Wed, 22 Oct 2014 15:05:02 -0500 Rob Browning wrote: RB> Rob Browning writes: >> The following issue was just reported against emacs23 in Debian, and >> from a quick glance, it looks like 24.4 still uses s_client, so if this >> is a problem, it's perhaps still relevant. RB> Oh, and the link