From 7296051d56252128709f0f4423e113200c611965 Mon Sep 17 00:00:00 2001
From: Tom Willemse <tom@ryuslash.org>
Date: Fri, 31 Oct 2014 15:01:56 +0100
Subject: [PATCH] Reject invalid SSL/TLS certificates

---
 emacs/.emacs.d/init.org | 11 +++++++++++
 1 file changed, 11 insertions(+)

diff --git a/emacs/.emacs.d/init.org b/emacs/.emacs.d/init.org
index 398551c..cd9e358 100644
--- a/emacs/.emacs.d/init.org
+++ b/emacs/.emacs.d/init.org
@@ -1020,6 +1020,17 @@
     (setq electric-pair-skip-whitespace 'chomp)
   #+END_SRC
 
+* Reject SSL/TLS certificates that don't check out
+
+  You just can't trust the internet. And I'd prefer to know if
+  something goes wrong.
+
+  #+BEGIN_SRC emacs-lisp
+    (defvar gnutls-verify-error)
+
+    (setq gnutls-verify-error t)
+  #+END_SRC
+
 * Programming
 
   Emacs is a real programmer's editor, especially so because it's so