Re: The netsec thread

[Eli Zaretskii]

> From: Robert Pluim <address@hidden>
> Cc: Lars Ingebrigtsen <address@hidden>,  address@hidden
> Date: Fri, 23 Aug 2019 11:40:44 +0200
> 
>     Eli> If there are any specific changes in behavior due to this
>     Eli> "tightening", we should consider them for NEWS.
> 
> I think those were noted in the changes to NEWS brought in from the
> branch. I *could* add something like this as well, although I really
> am not in favour of advertising the feature too much, hence the
> shouting:
> 
> +++
> ** New user option 'nsm-trust-local-network'.
> Allows skipping Network Security Manager checks for hosts on your
> local subnet(s).  DEFAULTS TO NIL.  There is a good reason for that,
> ensure you know what you are doing before you change it.

I don't believe in "security by obscurity", so I think this should be
in NEWS.  Especially since it's in the manual.  I would suggest a
slight rephrase, though:

  +++
  ** New user option 'nsm-trust-local-network'.
  Allows skipping Network Security Manager checks for hosts on your
  local subnet(s).  It defaults to nil.  Usually, there should be no
  need to set this non-nil, and doing that risks opening your local
  network connections to attacks.  So be sure you know what you are
  doing before changing the value.

Thanks.