[OS X Emacs] Verifying Aquamacs

Robert Goldman rpgoldman at sift.info
Fri Apr 24 15:15:58 EDT 2020


>
> David Reitter

> Guys,  Aquamacs checks for a new version every three days.  If the 
> website
> refuses to serve cgi-bin/currentversion.cgi without HTTP and only with 
> a
> certificate signed by an authority unknown to Emacs, then every user 
> is
> going to get that message.  And version updates will fail, too.   
> Suggest
> disabling HTTPS on the website for now.


I'm not a big fan of using HTTP, especially not for getting software I 
trust.

Can't we add the Let's Encrypt CA to the set of CAs we will accept?

Is the check for updates done in elisp?  If so, I can try to fix it.  
But if it's in C or Objective C, I'm afraid I'm out of my depth.


More information about the MacOSX-Emacs mailing list