From mboxrd@z Thu Jan 1 00:00:00 1970 Path: news.gmane.org!not-for-mail From: Xue Fuqiao Newsgroups: gmane.emacs.devel Subject: Re: Package signing infrastructure suggestion (was Re: ELPA security) Date: Tue, 1 Jan 2013 07:01:51 +0800 Organization: The Church of Emacs Message-ID: <20130101070151.7a6ee390c015019784f5e00a@gmail.com> References: <8738zf70ep.fsf@riseup.net> <871uejlbm1.fsf@lifelogs.com> <87623i5tld.fsf@lifelogs.com> <87pq1q8hnn.fsf_-_@ferrier.me.uk> <87y5gdzwcn.fsf@lifelogs.com> NNTP-Posting-Host: plane.gmane.org Mime-Version: 1.0 Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: 7bit X-Trace: ger.gmane.org 1356994939 7737 80.91.229.3 (31 Dec 2012 23:02:19 GMT) X-Complaints-To: usenet@ger.gmane.org NNTP-Posting-Date: Mon, 31 Dec 2012 23:02:19 +0000 (UTC) Cc: Ted Zlatanov To: emacs-devel@gnu.org Original-X-From: emacs-devel-bounces+ged-emacs-devel=m.gmane.org@gnu.org Tue Jan 01 00:02:33 2013 Return-path: Envelope-to: ged-emacs-devel@m.gmane.org Original-Received: from lists.gnu.org ([208.118.235.17]) by plane.gmane.org with esmtp (Exim 4.69) (envelope-from ) id 1TpoNG-0002Dw-RF for ged-emacs-devel@m.gmane.org; Tue, 01 Jan 2013 00:02:26 +0100 Original-Received: from localhost ([::1]:60880 helo=lists.gnu.org) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1TpoN1-0003ea-P9 for ged-emacs-devel@m.gmane.org; Mon, 31 Dec 2012 18:02:11 -0500 Original-Received: from eggs.gnu.org ([208.118.235.92]:50559) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1TpoMs-0003eJ-Lm for emacs-devel@gnu.org; Mon, 31 Dec 2012 18:02:10 -0500 Original-Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1TpoMr-0004i7-Cn for emacs-devel@gnu.org; Mon, 31 Dec 2012 18:02:02 -0500 Original-Received: from mail-da0-f52.google.com ([209.85.210.52]:36966) by eggs.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1TpoMr-0004hs-6A for emacs-devel@gnu.org; Mon, 31 Dec 2012 18:02:01 -0500 Original-Received: by mail-da0-f52.google.com with SMTP id f10so5871437dak.11 for ; Mon, 31 Dec 2012 15:02:00 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=x-received:date:from:to:cc:subject:message-id:in-reply-to :references:organization:x-mailer:mime-version:content-type :content-transfer-encoding; bh=NXKvvZIpcmLr5SFy2Pz583X1b7DQVQdlxYvo1ZiP3Os=; b=z5/3ygPkWe4e3dPCAHqKLQEaI6wcwwhl2cs+rsu/rmJTBgenoJlLSEdUzyF75RbC0j iwVUuoM5WhCbOXT8yOlw8nutvSIz6+L0XvV/BH3KGV70CeTi+DOJ7yU4eBBurDxpXTvb VEwO/Ww3EHxnB0Dn07fIaQqvuHCwIiXYns/EqXrIBHHH+taDL8SmhWWWNUhDwz07aVDm UrDJar+U1oUu6BuyhDhipQtDBvuQB7aoWNSSQ66PHidjGvm8ybK4E27qLUJOboBWNsZ8 7m9fLLrBZACx/IylWEkcylPKKH300IxtGzpmsxncelRLhizIccfBKmPoaV48Ve1Mr0Z+ gBMA== X-Received: by 10.68.197.135 with SMTP id iu7mr130607714pbc.71.1356994919822; Mon, 31 Dec 2012 15:01:59 -0800 (PST) Original-Received: from Emacs ([61.148.244.119]) by mx.google.com with ESMTPS id hs2sm25548780pbc.22.2012.12.31.15.01.56 (version=SSLv3 cipher=OTHER); Mon, 31 Dec 2012 15:01:59 -0800 (PST) In-Reply-To: <87y5gdzwcn.fsf@lifelogs.com> X-Mailer: Sylpheed 3.2.0 (GTK+ 2.24.13; x86_64-pc-linux-gnu) X-detected-operating-system: by eggs.gnu.org: GNU/Linux 3.x [fuzzy] X-Received-From: 209.85.210.52 X-BeenThere: emacs-devel@gnu.org X-Mailman-Version: 2.1.14 Precedence: list List-Id: "Emacs development discussions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: emacs-devel-bounces+ged-emacs-devel=m.gmane.org@gnu.org Original-Sender: emacs-devel-bounces+ged-emacs-devel=m.gmane.org@gnu.org Xref: news.gmane.org gmane.emacs.devel:156052 Archived-At: On Mon, 31 Dec 2012 17:32:24 -0500 Ted Zlatanov wrote: > I think for the ELPA it makes sense to strenghen that integration in > order to achieve package verification and other useful features, like > retrieving a specific verision of the ELPA repository or mirroring an > ELPA repository easily. I think so, too. Integrate the security with DVCS is a good choice. -- Best regards, Xue Fuqiao. http://www.emacswiki.org/emacs/XueFuqiao