Bug#861152: Bug#861725: unblock: nagstamon/2.0.1-4

2017-05-03 Thread Julien Cristau
On 05/03/2017 12:49 PM, Paul Wise wrote: > On Wed, 2017-05-03 at 12:24 +0200, Moritz Schlarb wrote: > >> - This has been the behavior of the Nagstamon package since forever >> (which is not a valid argumentation point - I know, but it's still a fact) > > There are two serious bugs here: > > 1) t

Bug#861152: Bug#861725: unblock: nagstamon/2.0.1-4

2017-05-03 Thread Paul Wise
On Wed, 2017-05-03 at 12:24 +0200, Moritz Schlarb wrote: > - This has been the behavior of the Nagstamon package since forever > (which is not a valid argumentation point - I know, but it's still a fact) There are two serious bugs here: 1) that certificates are not verified at least using CAs an

Bug#861152: Bug#861725: unblock: nagstamon/2.0.1-4

2017-05-03 Thread Moritz Schlarb
Hi Julien, hi Paul, On 03.05.2017 11:51, Julien Cristau wrote: > I don't see how not checking certificates is in any way a reasonable > thing to do. Silencing warnings about it makes it even worse. Absolutely true - but: - This has been the behavior of the Nagstamon package since forever (which