Thread (2 messages) flat view 2 messages, 2 authors, 2016-06-15

Re: [PATCH] send-email: squelch warning from Net::SMTP::SSL

From: Matthieu Moy <hidden>
Date: 2016-06-15 22:58:00

Ramkumar Ramachandra [off-list ref] writes:
John Keeping wrote:
quoted
I don't think this is really "fix", it's more plastering over the
problem.
It defaulted to SSL_VERIFY_NONE before Net::SMTP::SSL was updated, and
the behavior hasn't changed now.  The new version simply asks us to be
explicit about SSL_VERIFY_NONE, so we are aware about it.
"We" as "the Git developers", yes. But your change makes sure users are
_not_ aware about it. There's a long history of software ignoring SSL
certificates by default, I don't think we should cast in stone that we
don't want SSL certificate verification.

-- 
Matthieu Moy
http://www-verimag.imag.fr/~moy/
Keyboard shortcuts
hback out one level
jnext message in thread
kprevious message in thread
ldrill in
Escclose help / fold thread tree
?toggle this help