From mboxrd@z Thu Jan 1 00:00:00 1970 Path: news.gmane.org!not-for-mail From: Xue Fuqiao Newsgroups: gmane.emacs.devel Subject: Re: package.el + DVCS for security and convenience Date: Sat, 5 Jan 2013 06:21:56 +0800 Organization: The Church of Emacs Message-ID: <20130105062156.2fb0994e1afb5f0d99e39c57@gmail.com> References: <8738zf70ep.fsf@riseup.net> <871uejlbm1.fsf@lifelogs.com> <87obhmzl2f.fsf@bzg.ath.cx> <20121222141742.7494b429fe36e5ccef50cf6f@gmail.com> <87d2y2w9j5.fsf@uwakimon.sk.tsukuba.ac.jp> <87wqwas0gr.fsf@bzg.ath.cx> <87d2y2p6d7.fsf@bzg.ath.cx> <87sj6xg9p2.fsf_-_@lifelogs.com> <87k3s78hsc.fsf@lifelogs.com> <87ehi65uv4.fsf@lifelogs.com> <87hamxndc7.fsf@lifelogs.com> NNTP-Posting-Host: plane.gmane.org Mime-Version: 1.0 Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: 7bit X-Trace: ger.gmane.org 1357338131 13999 80.91.229.3 (4 Jan 2013 22:22:11 GMT) X-Complaints-To: usenet@ger.gmane.org NNTP-Posting-Date: Fri, 4 Jan 2013 22:22:11 +0000 (UTC) Cc: Ted Zlatanov To: emacs-devel@gnu.org Original-X-From: emacs-devel-bounces+ged-emacs-devel=m.gmane.org@gnu.org Fri Jan 04 23:22:28 2013 Return-path: Envelope-to: ged-emacs-devel@m.gmane.org Original-Received: from lists.gnu.org ([208.118.235.17]) by plane.gmane.org with esmtp (Exim 4.69) (envelope-from ) id 1TrFem-0004MV-0q for ged-emacs-devel@m.gmane.org; Fri, 04 Jan 2013 23:22:28 +0100 Original-Received: from localhost ([::1]:42201 helo=lists.gnu.org) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1TrFeW-0001ja-KS for ged-emacs-devel@m.gmane.org; Fri, 04 Jan 2013 17:22:12 -0500 Original-Received: from eggs.gnu.org ([208.118.235.92]:35306) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1TrFeT-0001jO-UH for emacs-devel@gnu.org; Fri, 04 Jan 2013 17:22:11 -0500 Original-Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1TrFeQ-000483-OY for emacs-devel@gnu.org; Fri, 04 Jan 2013 17:22:09 -0500 Original-Received: from mail-pb0-f50.google.com ([209.85.160.50]:46107) by eggs.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1TrFeQ-00047s-Hw for emacs-devel@gnu.org; Fri, 04 Jan 2013 17:22:06 -0500 Original-Received: by mail-pb0-f50.google.com with SMTP id wz7so9434790pbc.9 for ; Fri, 04 Jan 2013 14:22:05 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=x-received:date:from:to:cc:subject:message-id:in-reply-to :references:organization:x-mailer:mime-version:content-type :content-transfer-encoding; bh=zqBp5c21xcqzcHkt6nkYmzqagAcQYV3H09yLmQ2hk5c=; b=mZeZ61ZG2OexFA+/OGAO8xFpjJ3KP08pKq3MfbSrM/EsETCkuwgiYq/6ipBhVGZSGf KNWaIW/yRTDTk3GOf0m63WQqqq1Yh1XMnWWcA5I4NEuPuQcyxOzWW2ohTMnz/xlPgHqN kvShXMFreI8+4xHm6AyAHL/4/yrZdz8ClFezNlSz/OMJ/m3j2NbRD1I6JFLvtpCUJ4C4 vnThIGE82AsM0gig+Wl4xidyKC9PgYIcnjPI+c+hmYsRrVCyRTvfR373NukdwwnmUYsK SuAoLJbYRbLIPbxXOEjCGlV86dURyiC38rvzWOEbaHTXJOBKmBf5Ysoyu6uTvk1rgIr3 KNiw== X-Received: by 10.68.132.232 with SMTP id ox8mr165959671pbb.46.1357338125471; Fri, 04 Jan 2013 14:22:05 -0800 (PST) Original-Received: from Emacs ([61.148.244.10]) by mx.google.com with ESMTPS id nm2sm32889534pbc.43.2013.01.04.14.22.01 (version=SSLv3 cipher=OTHER); Fri, 04 Jan 2013 14:22:04 -0800 (PST) In-Reply-To: <87hamxndc7.fsf@lifelogs.com> X-Mailer: Sylpheed 3.2.0 (GTK+ 2.24.13; x86_64-pc-linux-gnu) X-detected-operating-system: by eggs.gnu.org: GNU/Linux 3.x [fuzzy] X-Received-From: 209.85.160.50 X-BeenThere: emacs-devel@gnu.org X-Mailman-Version: 2.1.14 Precedence: list List-Id: "Emacs development discussions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: emacs-devel-bounces+ged-emacs-devel=m.gmane.org@gnu.org Original-Sender: emacs-devel-bounces+ged-emacs-devel=m.gmane.org@gnu.org Xref: news.gmane.org gmane.emacs.devel:156085 Archived-At: On Fri, 04 Jan 2013 11:05:12 -0500 Ted Zlatanov wrote: > Now, since everyone but Xue Fuqiao has told me that tying package.el to > the DVCS is a bad idea, we need to decide how these signatures will be > stored in the ELPA, and how they can fit into the existing ELPA > structure. I've changed my mind about tying package.el to DVCS now. It require external tools, so it wouldn't be available to all Emacs users. If people like this feature, we can make it a package in ELPA to make its use optional. As for GnuPG and OpenPGP implementation, I prefer the latter(although it is more difficult and may be low-quality), because (at least)I don't like call external tools. -- Best regards, Xue Fuqiao. http://www.emacswiki.org/emacs/XueFuqiao