Function: nsm-protocol-check--anon-kx

nsm-protocol-check--anon-kx is a byte-compiled function defined in nsm.el.gz.

Signature

(nsm-protocol-check--anon-kx HOST PORT STATUS &optional SETTINGS)

Documentation

Check for anonymous key exchange.

Anonymous key exchange exposes the connection to man-in-the-middle attacks.

Reference:

GnuTLS authors (2018). "GnuTLS Manual 4.3.3 Anonymous authentication", https://www.gnutls.org/manual/gnutls.html#Anonymous-authentication

Source Code

;; Defined in /usr/src/emacs/lisp/net/nsm.el.gz
(defun nsm-protocol-check--anon-kx (_host _port status &optional _settings)
  "Check for anonymous key exchange.

Anonymous key exchange exposes the connection to
man-in-the-middle attacks.

Reference:

GnuTLS authors (2018).  \"GnuTLS Manual 4.3.3 Anonymous
authentication\",
`https://www.gnutls.org/manual/gnutls.html#Anonymous-authentication'"
  (let ((kx (plist-get status :key-exchange)))
    (and (string-match "\\bANON\\b" kx)
         (format-message
          "anonymous key exchange method (%s) can be unsafe"
          kx))))