Re: A couple of questions and concerns about Emacs network security

[Jimmy Yuen Ho Wong]

This should have a :version tag.

I'll update the patch.

 

Do we really want/need to allow a function here?  Isn't a list of
files enough?  A function is more dangerous than a string, especially
in a security-sensitive place.

It's just convenient. fetch-crl will generate close to 100+ CRL PEM files, so it's a bit impractical to enter by hand.

Thanks for reviewing!