Re: A couple of questions and concerns about Emacs network security

[Eli Zaretskii]

> From: Noam Postavsky <address@hidden>
> Date: Sun, 24 Jun 2018 10:48:10 -0400
> Cc: Eli Zaretskii <address@hidden>, Paul Eggert <address@hidden>,
>       Jimmy Yuen Ho Wong <address@hidden>,
>       Emacs developers <address@hidden>
> 
> On 24 June 2018 at 10:34, Lars Ingebrigtsen <address@hidden> wrote:
> 
> > I had meant to implement warnings for this stuff on the default `medium'
> > level instead of letting it remain on the `high' level, but I simply
> > forgot.  I'll be changing that on master hopefully sometime next week.
> 
> Yeah, I think that's a good way to block this vulnerability. Though
> it's unfortunate that we're still going to release a 26.2 which
> silently accepts primes smaller than 1024 bits by default.

When the changes are pushed to master, we could look at them and
consider whether they (or some of their parts) are safe enough for
emacs-26.