From mboxrd@z Thu Jan 1 00:00:00 1970 Path: news.gmane.org!not-for-mail From: Xue Fuqiao Newsgroups: gmane.emacs.devel Subject: Re: ELPA security Date: Sat, 22 Dec 2012 14:17:42 +0800 Organization: The Church of Emacs Message-ID: <20121222141742.7494b429fe36e5ccef50cf6f@gmail.com> References: <8738zf70ep.fsf@riseup.net> <871uejlbm1.fsf@lifelogs.com> <87obhmzl2f.fsf@bzg.ath.cx> NNTP-Posting-Host: plane.gmane.org Mime-Version: 1.0 Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: 7bit X-Trace: ger.gmane.org 1356157090 15336 80.91.229.3 (22 Dec 2012 06:18:10 GMT) X-Complaints-To: usenet@ger.gmane.org NNTP-Posting-Date: Sat, 22 Dec 2012 06:18:10 +0000 (UTC) Cc: emacs-devel@gnu.org To: Bastien Original-X-From: emacs-devel-bounces+ged-emacs-devel=m.gmane.org@gnu.org Sat Dec 22 07:18:25 2012 Return-path: Envelope-to: ged-emacs-devel@m.gmane.org Original-Received: from lists.gnu.org ([208.118.235.17]) by plane.gmane.org with esmtp (Exim 4.69) (envelope-from ) id 1TmIPg-0008SP-99 for ged-emacs-devel@m.gmane.org; Sat, 22 Dec 2012 07:18:24 +0100 Original-Received: from localhost ([::1]:59328 helo=lists.gnu.org) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1TmIPS-0005NC-9H for ged-emacs-devel@m.gmane.org; Sat, 22 Dec 2012 01:18:10 -0500 Original-Received: from eggs.gnu.org ([208.118.235.92]:36215) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1TmIPN-0005N4-3A for emacs-devel@gnu.org; Sat, 22 Dec 2012 01:18:09 -0500 Original-Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1TmIPH-0002Lq-9R for emacs-devel@gnu.org; Sat, 22 Dec 2012 01:18:05 -0500 Original-Received: from mail-pb0-f41.google.com ([209.85.160.41]:61420) by eggs.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1TmIPA-0002LN-ER; Sat, 22 Dec 2012 01:17:52 -0500 Original-Received: by mail-pb0-f41.google.com with SMTP id xa7so3136232pbc.0 for ; Fri, 21 Dec 2012 22:17:51 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=x-received:date:from:to:cc:subject:message-id:in-reply-to :references:organization:x-mailer:mime-version:content-type :content-transfer-encoding; bh=NTwd/2i8t2HMvug/7whbiTduqAWpyzSwkextNDEo2Vc=; b=LKaLiB047aZweR4TfpVH2kMf9CtzJxvsXgMKZoT59nu6MnV7JnBPbiPP0p7kbpQGt1 r3AxfY3okVqHv6yP0frLhV7hRjHJC2xtQpksx/3nAc22Bc/7BtB1SyBLO99v3s7KjCM6 h30vCr49/taVvChIxvPuNo9Jk/s3FQSwEwg6a/FeRf4So3Vd0RxGW8ONcpWNecgR8Zgu kPV0fk0oGO5QEI1pNDMhHTNES2Jmm+KDkzrGWwHmMPNn7+bOH8JiqciNA4w7JQ9/wOqD nToYqNH1gxCS/rR7Tgodt/34NwG34tns30xCkEE73BAclCSgI9c6y7ucIMStzH3zxnKK Dqwg== X-Received: by 10.66.89.9 with SMTP id bk9mr43051686pab.67.1356157071412; Fri, 21 Dec 2012 22:17:51 -0800 (PST) Original-Received: from Emacs ([61.149.230.231]) by mx.google.com with ESMTPS id ol4sm8279242pbb.58.2012.12.21.22.17.46 (version=SSLv3 cipher=OTHER); Fri, 21 Dec 2012 22:17:50 -0800 (PST) In-Reply-To: <87obhmzl2f.fsf@bzg.ath.cx> X-Mailer: Sylpheed 3.2.0 (GTK+ 2.24.13; x86_64-pc-linux-gnu) X-detected-operating-system: by eggs.gnu.org: GNU/Linux 3.x [fuzzy] X-Received-From: 209.85.160.41 X-BeenThere: emacs-devel@gnu.org X-Mailman-Version: 2.1.14 Precedence: list List-Id: "Emacs development discussions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: emacs-devel-bounces+ged-emacs-devel=m.gmane.org@gnu.org Original-Sender: emacs-devel-bounces+ged-emacs-devel=m.gmane.org@gnu.org Xref: news.gmane.org gmane.emacs.devel:155752 Archived-At: On Sat, 22 Dec 2012 06:07:19 +0100 Bastien wrote: > What about simply distributing, within GNU Emacs the > list of md5 hashes of valid(ated) packages? It's quite easy and straightforward. And maybe functions like SHA-3 or MD6 are even better. -- Best regards, Xue Fuqiao. http://www.emacswiki.org/emacs/XueFuqiao