Hi! Thanks for security review of this. v2.3.10 now uses umask directly, so I think this should be solved: http://git.savannah.gnu.org/gitweb/?p=gnutls.git;a=commitdiff;h=d0629b2c7d20c32c746cc221e997485d63ee2d71 /Simon