diff options
| author | Stefan Kangas <stefankangas@gmail.com> | 2023-10-24 16:20:42 +0200 |
|---|---|---|
| committer | Stefan Kangas <stefankangas@gmail.com> | 2023-10-24 16:41:10 +0200 |
| commit | dbcaaf375f285a42ff1a81c313a454264374cbdb (patch) | |
| tree | 830680dcf5105af629cf10b13565d81fd001dbd5 /etc/NEWS | |
| parent | a59d1da0dde890da59dc007d39efb1a0892ebbb6 (diff) | |
| download | emacs-dbcaaf375f285a42ff1a81c313a454264374cbdb.tar.gz | |
Warn about 3DES when network-security-level is medium
* lisp/net/nsm.el (network-security-protocol-checks): Bump
deprecated and insecure '3des-cipher' to 'medium'.
* doc/emacs/misc.texi (Network Security): Document the above change.
Ref: https://nvd.nist.gov/vuln/detail/CVE-2016-2183
Diffstat (limited to 'etc/NEWS')
| -rw-r--r-- | etc/NEWS | 6 |
1 files changed, 6 insertions, 0 deletions
@@ -62,6 +62,12 @@ more details. ** Emacs now supports Unicode Standard version 15.1. +** The Network Security Manager now warns about 3DES by default. +This cypher is no longer recommended owing to a major vulnerability +disclosed in 2016, and its small 112 bit key size. Emacs now warns +about its use also when 'network-security-level' is set to 'medium' +(the default). See 'network-security-protocol-checks'. + ** Help *** 'describe-function' shows function inferred type when available. |
