[gnutls-devel] Emacs 24, 25, and future integration of GnuTLS 2.x vs. 3.x

[Nikos Mavrogiannopoulos]

On Wed, Nov 26, 2014 at 6:25 PM, Ted Zlatanov <tzz at lifelogs.com> wrote:
> Hi,
>
> Emacs 24 supports GnuTLS 2.x. We plan to continue that support in Emacs
> 25 (master branch of the new Emacs Git repo) but will revisit 2.x
> support and possibly remove it with Emacs 26. Partly that's driven by
> the state of GnuTLS 2.x vs. 3.x support in Debian Stable and other
> distribution, and partly by the burden of supporting the older versions
> that lack many useful features.
> I wanted to ask here if there are any scenarios we should beware with
> supporting 2.x, especially as far as user risk and exposure to exploits.

Hello Ted,
 The oldest supported release is stable-old (which is 3.2.x now).
Anything else before that, is typically not supported (I may release
fixes for some older releases for serious issues occasionally but
there are no guarantees). The 2.x releases are totally unsupported, I
see no reason for depending on them.

regards,
Nikos