From mboxrd@z Thu Jan 1 00:00:00 1970 Path: news.gmane.io!.POSTED.ciao.gmane.io!not-for-mail From: =?UTF-8?Q?Cl=c3=a9ment_Pit-Claudel?= Newsgroups: gmane.emacs.devel Subject: Re: Why are so many great packages not trying to get included in GNU Emacs? Date: Mon, 11 May 2020 15:13:23 -0400 Message-ID: <7c61a272-f4ba-fdfd-755b-1a720e8cc2df@gmail.com> References: <9mmFgzvrBwjt_n_VJyaJdXINraNi5HsGpwq-0MLeKiJA7kG2BQA4uywrzjyz7lpRS0OZDpjEi8lspOKYUA7P_QsODsDew_8nbH960G55fmY=@protonmail.com> <97DA7804-F647-4A1D-B8E0-AFFE7A324C64@gmail.com> <87d07xamrg.fsf@ericabrahamsen.net> <878silajdl.fsf@ericabrahamsen.net> <87tv18pyh4.fsf@russet.org.uk> <83blmu9u57.fsf@gnu.org> Mime-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 8bit Injection-Info: ciao.gmane.io; posting-host="ciao.gmane.io:159.69.161.202"; logging-data="10767"; mail-complaints-to="usenet@ciao.gmane.io" User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:68.0) Gecko/20100101 Thunderbird/68.7.0 Cc: casouri@gmail.com, rms@gnu.org, eric@ericabrahamsen.net, emacs-devel@gnu.org, monnier@iro.umontreal.ca, ndame@protonmail.com, phillip.lord@russet.org.uk To: Eli Zaretskii Original-X-From: emacs-devel-bounces+ged-emacs-devel=m.gmane-mx.org@gnu.org Mon May 11 21:14:20 2020 Return-path: Envelope-to: ged-emacs-devel@m.gmane-mx.org Original-Received: from lists.gnu.org ([209.51.188.17]) by ciao.gmane.io with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1jYDsX-0002eJ-G1 for ged-emacs-devel@m.gmane-mx.org; Mon, 11 May 2020 21:14:17 +0200 Original-Received: from localhost ([::1]:49204 helo=lists1p.gnu.org) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1jYDsW-0000NL-HJ for ged-emacs-devel@m.gmane-mx.org; Mon, 11 May 2020 15:14:16 -0400 Original-Received: from eggs.gnu.org ([2001:470:142:3::10]:50948) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1jYDrt-00081b-Fu for emacs-devel@gnu.org; Mon, 11 May 2020 15:13:37 -0400 Original-Received: from mail-qv1-xf2e.google.com ([2607:f8b0:4864:20::f2e]:40943) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_128_GCM_SHA256:128) (Exim 4.90_1) (envelope-from ) id 1jYDrs-0000pS-FH; Mon, 11 May 2020 15:13:37 -0400 Original-Received: by mail-qv1-xf2e.google.com with SMTP id fb4so4986478qvb.7; Mon, 11 May 2020 12:13:35 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=subject:to:cc:references:from:message-id:date:user-agent :mime-version:in-reply-to:content-language:content-transfer-encoding; bh=CmzjCUw/7Cr/GHopYqitFOsDHAvRno7iDQajK6IQhhk=; b=gdQG9kFSiBYGAMR3BEzmuQILMRSryM0rs9tKYNvQKrg7vRqCkpROCgOC/sLFxvUfQr BPqneltBceOdHsQyjHMQPtffFmh3w4RzTx41quD3aPh+o40JJQ1BWl3Rco5WF3KkVJFc BLc1GGZv1jOj/HCmV/oy7/Nl96WWJlKOZa8lNqzGSfspANa4917AGDUQyV2oj4SfOGC+ Ny9iDn4U15F8upsEYRCF3CSA7Wi2y0Vj0w+FVkxuKr1KO4WdHpt2op8yETVjTVE/OLZj wLjsTLOe/zWX/BYxAgCGLi8bL2sLsQcIVUVnoADThaaeWO1vyfzjCZcnoXJgWw0wRzoE ySKQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:subject:to:cc:references:from:message-id:date :user-agent:mime-version:in-reply-to:content-language :content-transfer-encoding; bh=CmzjCUw/7Cr/GHopYqitFOsDHAvRno7iDQajK6IQhhk=; b=EkN/OrVFax4C0yHuUsyqW8vV/gBBkQsO3HyGxKXoOiAd2uOWJxmlU4SH7leuscAO8F oUYg5DU6DQYsUEgYUMxp6vH6dKl6+xASqeRVz+sk0/YwqAMN0MA8c4H074FvQ3rQBBuT BTYmCeBnG/TdC8BF10CGl/S9s2z8GzH8Bbcg/44Kvr3DdQkas5iUgqtesZPHNyCQmUO9 wzXHYYZtW33IgGxOdCly9NXLzEi7rUTuIZUIIfZq8zi6oNUUSTrEmi8FFqJM82BCCsTO uMrYhwBWHALPHlY2Hu/z8gy3HughZv1pM1aQSuP7nGZ0vQ+Rr1jZpXaSPXs7z8lxvs3+ IY7w== X-Gm-Message-State: AGi0PuZgdhZfyujN2sUcCwvOZiuaAZl31PjW5kn/XzDkTeoND7DVTOyC iBxQ3rGmSMXPmQ/YMyOkbSU= X-Google-Smtp-Source: APiQypK7+z19eT6kSUZ0j3XdwtV8uQ3UnK8fG6D+bUroPSo2tya7u6nNfuhpGiXO4KIW1JqGShJdEg== X-Received: by 2002:a0c:9002:: with SMTP id o2mr16737569qvo.3.1589224414855; Mon, 11 May 2020 12:13:34 -0700 (PDT) Original-Received: from ?IPv6:2601:184:4180:66e7:4d17:b25e:8d9:2188? ([2601:184:4180:66e7:4d17:b25e:8d9:2188]) by smtp.googlemail.com with ESMTPSA id i47sm740950qtc.51.2020.05.11.12.13.30 (version=TLS1_3 cipher=TLS_AES_128_GCM_SHA256 bits=128/128); Mon, 11 May 2020 12:13:34 -0700 (PDT) In-Reply-To: <83blmu9u57.fsf@gnu.org> Content-Language: en-GB Received-SPF: pass client-ip=2607:f8b0:4864:20::f2e; envelope-from=cpitclaudel@gmail.com; helo=mail-qv1-xf2e.google.com X-detected-operating-system: by eggs.gnu.org: No matching host in p0f cache. That's all we know. X-Spam_score_int: -20 X-Spam_score: -2.1 X-Spam_bar: -- X-Spam_report: (-2.1 / 5.0 requ) BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001 autolearn=_AUTOLEARN X-Spam_action: no action X-BeenThere: emacs-devel@gnu.org X-Mailman-Version: 2.1.23 Precedence: list List-Id: "Emacs development discussions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: emacs-devel-bounces+ged-emacs-devel=m.gmane-mx.org@gnu.org Original-Sender: "Emacs-devel" Xref: news.gmane.io gmane.emacs.devel:249868 Archived-At: On 11/05/2020 14.57, Eli Zaretskii wrote:>> From: Clément Pit-Claudel Date: Mon, 11 May >> 2020 14:51:26 -0400 Cc: eric@ericabrahamsen.net, casouri@gmail.com, >> emacs-devel@gnu.org, monnier@iro.umontreal.ca, >> ndame@protonmail.com >> >> On 06/05/2020 22.43, Richard Stallman wrote: >>> It is not terrible lot of work for people to deal with those >>> issues, but I wouldn't assume a simple program can. >> >> These days assignments are signed with PGP keys. Commits can also >> be signed using PGP keys. Wouldn't that provide an reliable way to >> pair up contributors who have assigned copyright with their >> contributions? > > I think you are missing the main point. The problem is not > security, it is correct attribution. Sorry, it seems my email was unclear. The proposal doesn't have to do with security. I'm trying to find a robust way to figure out if someone has copyright papers. Right now Stefan & you can check the list, and the rest of us can't, which is a problem for package maintainers. Apparently the list can't be made public, so I'm suggesting to make public a list of public keys public instead. I was not thinking about security. > The author of the committed changeset (not the person who does the > commit, the author) must be the person who actually wrote the code, > not someone else. If that someone else is a real benevolent person, it is still a > problem, because we will make a false presentation that a different > person made the change. That problem exists regardless of how we check whether someone has copyright papers, right? What I'm trying to find is a way to check whether I can accept a patch into an ELPA package without having to email an Emacs maintainer every time. Clément.