From mboxrd@z Thu Jan 1 00:00:00 1970 Path: news.gmane.org!not-for-mail From: Drew Adams Newsgroups: gmane.emacs.devel Subject: RE: ELPA policy Date: Fri, 13 Nov 2015 15:03:10 -0800 (PST) Message-ID: <78ad3925-9441-4312-9e47-5b216ff79f18@default> References: <<<87ziyuaqhl.fsf@petton.fr>>> <> <868u65afvh.fsf@stephe-leake.org> >> <<87lha5snji.fsf@isaac.fritz.box> >> <<87d1vhsmuj.fsf@isaac.fritz.box> >> <<878u65slue.fsf@isaac.fritz.box> >> <<874mgtsjwn.fsf@isaac.fritz.box> > <867flp8nb7.fsf@stephe-leake.org>> < <9e33129a-07d0-4abe-a94e-32d6d881519b@default> > <86bnb06g7g.fsf@stephe-leake.org>> > > <<86oaezemp9.fsf@stephe-leake.org>> <> <1a993b13-0e96-4350-a132-7e8fb05afef4@default>> <> NNTP-Posting-Host: plane.gmane.org Mime-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable X-Trace: ger.gmane.org 1447455821 7272 80.91.229.3 (13 Nov 2015 23:03:41 GMT) X-Complaints-To: usenet@ger.gmane.org NNTP-Posting-Date: Fri, 13 Nov 2015 23:03:41 +0000 (UTC) Cc: jwiegley@gmail.com, stephen_leake@stephe-leake.org, emacs-devel@gnu.org To: rms@gnu.org Original-X-From: emacs-devel-bounces+ged-emacs-devel=m.gmane.org@gnu.org Sat Nov 14 00:03:25 2015 Return-path: Envelope-to: ged-emacs-devel@m.gmane.org Original-Received: from lists.gnu.org ([208.118.235.17]) by plane.gmane.org with esmtp (Exim 4.69) (envelope-from ) id 1ZxNNM-0003YC-Ug for ged-emacs-devel@m.gmane.org; Sat, 14 Nov 2015 00:03:25 +0100 Original-Received: from localhost ([::1]:55681 helo=lists.gnu.org) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1ZxNNM-0006K3-Cg for ged-emacs-devel@m.gmane.org; Fri, 13 Nov 2015 18:03:24 -0500 Original-Received: from eggs.gnu.org ([2001:4830:134:3::10]:54186) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1ZxNNI-0006Fe-E1 for emacs-devel@gnu.org; Fri, 13 Nov 2015 18:03:21 -0500 Original-Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1ZxNNC-0008Cp-Rh for emacs-devel@gnu.org; Fri, 13 Nov 2015 18:03:20 -0500 Original-Received: from aserp1040.oracle.com ([141.146.126.69]:38102) by eggs.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1ZxNNC-0008Cg-MD; Fri, 13 Nov 2015 18:03:14 -0500 Original-Received: from userv0022.oracle.com (userv0022.oracle.com [156.151.31.74]) by aserp1040.oracle.com (Sentrion-MTA-4.3.2/Sentrion-MTA-4.3.2) with ESMTP id tADN3CDn025180 (version=TLSv1 cipher=DHE-RSA-AES256-SHA bits=256 verify=OK); Fri, 13 Nov 2015 23:03:13 GMT Original-Received: from aserv0121.oracle.com (aserv0121.oracle.com [141.146.126.235]) by userv0022.oracle.com (8.13.8/8.13.8) with ESMTP id tADN3CoU024531 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=FAIL); Fri, 13 Nov 2015 23:03:12 GMT Original-Received: from abhmp0012.oracle.com (abhmp0012.oracle.com [141.146.116.18]) by aserv0121.oracle.com (8.13.8/8.13.8) with ESMTP id tADN3CxR007381; Fri, 13 Nov 2015 23:03:12 GMT In-Reply-To: <> X-Priority: 3 X-Mailer: Oracle Beehive Extensions for Outlook 2.0.1.9 (901082) [OL 12.0.6691.5000 (x86)] X-Source-IP: userv0022.oracle.com [156.151.31.74] X-detected-operating-system: by eggs.gnu.org: GNU/Linux 2.4.x-2.6.x [generic] X-Received-From: 141.146.126.69 X-BeenThere: emacs-devel@gnu.org X-Mailman-Version: 2.1.14 Precedence: list List-Id: "Emacs development discussions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: emacs-devel-bounces+ged-emacs-devel=m.gmane.org@gnu.org Original-Sender: emacs-devel-bounces+ged-emacs-devel=m.gmane.org@gnu.org Xref: news.gmane.org gmane.emacs.devel:194424 Archived-At: > > > We can make the security tighter. Drew, are you willing > > > to GPG-sign your new versions? >=20 > > I don't really know what that entails. >=20 > It means you would make diffs to show the change to install, > plus a log entry, sign that whole thing with GnuPG, and mail > it to a certain address. The signature would demonstrate it > came from you. >=20 > Is that ok for you? I have no problem creating diffs & log entries, and emailing them in. I've mailed in plenty of patches that way. Dunno what "sign that whole thing with GnuPG" entails. What is needed for that (e.g., on MS Windows)? Looking at the doc at https://www.gnupg.org/documentation/howtos.html and http://www.dewinter.com/gnupg_howto/english/GPGMiniHowto-2.html, it seems I would need to install GnuPG from source code, using a C compiler etc. I don't plan to install and use tools such as a C compiler on my laptop, so I guess the answer would be no; sorry. If there were an easy-to-use Windows binary for such signing, then I would probably do as you propose. (I don't do software development anymore. I use MS Windows binaries of Emacs, and I write some Emacs-Lisp code. I do have (an old version of) Cygwin installed, so that I can use a few simple commands from within Emacs. That's about it.) I don't mean to make a big deal about this. I'm not saying no definitively. But AFAIK there is not necessarily even any interest in adding any of the code I've written to Emacs. I don't feel like going through a lot of preparation for nothing. My libraries are there, and have been for quite a while. If someone is really interested in something, let me know and maybe we can work something out. Otherwise, we are likely wasting each other's time here. I don't mean to waste your time. (But I do appreciate your having considered this.) Again, my original point was about MELPA and updates to it from the wiki. And again, my use of MELPA is likely not typical. Perhaps I should have said nothing at all about it.