On Mo, 2010-02-15 at 14:33 +0000, Ove Kaaven wrote:
Patrick Ohly skrev:
> On Mo, 2010-02-15 at 12:55 +0000, Ove Kaaven wrote:
>> They can disable the certificate verification from the config file, I'm
>> not sure I see a reason to explicitly compile out the checking code.
>
> --disable-ssl-certificate-check only disables the default, the check is
> still in the code. The main reason is that it helps that class of users
> who will never figure out why SSL connections fail.
OK, could do that if you think it's a good idea, though it's supposedly
less secure or something.
It depends on Maemo users. If they are capable enough to figure out that
they have a problem with SSL, they may be able to solve it themselves
(turn off checking or somehow import the certificates). I'm sure
everyone reading this list falls into that category.
I'm worried about the class of users who don't figure it out. Anyway,
you know the Maemo community better than I do. Your choice ;-}
--
Best Regards, Patrick Ohly
The content of this message is my personal opinion only and although
I am an employee of Intel, the statements I make here in no way
represent Intel's position on the issue, nor am I authorized to speak
on behalf of Intel on this matter.