Re: The netsec thread

[Lars Ingebrigtsen]

Robert Pluim <address@hidden> writes:

> -  (let ((unsafe-renegotiation (not (plist-get status :safe-renegotiation))))
> -    (and unsafe-renegotiation
> -         (format-message
> -          "safe renegotiation is not supported, connection not protected 
> from impersonators"))))
> +  (when (string-version-lessp (plist-get status :protocol) "TLS1.3")
> +    (let ((unsafe-renegotiation (not (plist-get status 
> :safe-renegotiation))))
> +      (and unsafe-renegotiation
> +           (format-message
> +            "safe renegotiation is not supported, connection not protected 
> from impersonators")))))

After Paul's patch, I think it would make sense to just check for
whether :safe-renegotiation is present at all, and not check for
protocol version here.  I.e., use `plist-member' first.

-- 
(domestic pets only, the antidote for overdose, milk.)
   bloggy blog: http://lars.ingebrigtsen.no