I'm getting this when running emacs -q after adding adding the
Marmalade repo (https://marmalade-repo.org/packages/):

https://paste.anarc.at/snaps/snap-2017.04.24-12.53.11.png

This is after running package-list-packages with the Marmalade repo
configured, running under emacs -q. Hitting "always" in that dialog
creates the following file in .emacs.d/network-security.data:

(
 (:id "sha1:85457c729378cc93c732b6a3941c8e4f9c2e60f3" :fingerprint "sha1:ab:a6:d7:6a:b3:d3:63:fa:19:0d:65:41:60:23:6e:ef:d3:2a:46:dc" :host "marmalade-repo.org:443" :conditions (:unknown-ca :invalid))
)

There are two distinct problems here:

 1. the marmalade-repo.org should be trusted. it works in Firefox and
    Chromium - this is probably out of scope here and has been
    reported in:

https://github.com/nicferrier/elmarmalade/issues/144

 2. the exception shouldn't use a SHA-1 exception, which is now well
    known to be weak

Of course, marmelade now seems like it's dead and we should move on,
but this may happen on other repositories and it seems like a bad idea
to store exceptions in SHA-1.

Thanks,

A.