From mboxrd@z Thu Jan 1 00:00:00 1970 Path: news.gmane.io!.POSTED.ciao.gmane.io!not-for-mail From: =?UTF-8?Q?Cl=c3=a9ment_Pit-Claudel?= Newsgroups: gmane.emacs.devel Subject: Re: Why are so many great packages not trying to get included in GNU Emacs? Date: Mon, 11 May 2020 15:36:31 -0400 Message-ID: <7f820b59-ebbc-18c7-9f08-104a7ba88dd2@gmail.com> References: <9mmFgzvrBwjt_n_VJyaJdXINraNi5HsGpwq-0MLeKiJA7kG2BQA4uywrzjyz7lpRS0OZDpjEi8lspOKYUA7P_QsODsDew_8nbH960G55fmY=@protonmail.com> <97DA7804-F647-4A1D-B8E0-AFFE7A324C64@gmail.com> <87d07xamrg.fsf@ericabrahamsen.net> <878silajdl.fsf@ericabrahamsen.net> <87tv18pyh4.fsf@russet.org.uk> <83blmu9u57.fsf@gnu.org> <7c61a272-f4ba-fdfd-755b-1a720e8cc2df@gmail.com> <838shy9srs.fsf@gnu.org> Mime-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 8bit Injection-Info: ciao.gmane.io; posting-host="ciao.gmane.io:159.69.161.202"; logging-data="116127"; mail-complaints-to="usenet@ciao.gmane.io" User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:68.0) Gecko/20100101 Thunderbird/68.7.0 Cc: casouri@gmail.com, rms@gnu.org, eric@ericabrahamsen.net, emacs-devel@gnu.org, monnier@iro.umontreal.ca, ndame@protonmail.com, phillip.lord@russet.org.uk To: Eli Zaretskii Original-X-From: emacs-devel-bounces+ged-emacs-devel=m.gmane-mx.org@gnu.org Mon May 11 21:37:21 2020 Return-path: Envelope-to: ged-emacs-devel@m.gmane-mx.org Original-Received: from lists.gnu.org ([209.51.188.17]) by ciao.gmane.io with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1jYEEq-000U56-NR for ged-emacs-devel@m.gmane-mx.org; Mon, 11 May 2020 21:37:20 +0200 Original-Received: from localhost ([::1]:35980 helo=lists1p.gnu.org) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1jYEEp-0005dZ-Ow for ged-emacs-devel@m.gmane-mx.org; Mon, 11 May 2020 15:37:19 -0400 Original-Received: from eggs.gnu.org ([2001:470:142:3::10]:54628) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1jYEE9-00052w-Ey for emacs-devel@gnu.org; Mon, 11 May 2020 15:36:37 -0400 Original-Received: from mail-qk1-x744.google.com ([2607:f8b0:4864:20::744]:46674) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_128_GCM_SHA256:128) (Exim 4.90_1) (envelope-from ) id 1jYEE8-00072D-8C; Mon, 11 May 2020 15:36:37 -0400 Original-Received: by mail-qk1-x744.google.com with SMTP id f83so11073609qke.13; Mon, 11 May 2020 12:36:34 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=subject:to:cc:references:from:message-id:date:user-agent :mime-version:in-reply-to:content-language:content-transfer-encoding; bh=a/En1VGhUw/yHQqPWBN8GOVfG6fVriVWCVJ+LoSnNBI=; b=X3d+FpZAtlG1jy0i3QQ5ClDsY07z1NLi0oh8h9yqaxLdcirHTUyP9eln/9T8amtRT+ w5NA5q/wsKnRsp0I/4hpSZVJzd7B6AtxpQT32BJglAfJUEH6vaWwtqzKEQxIVA1BHckp eGnTGu5EMzj4tfiGqQAkaCgzm2UbGwa7kTN5pKWKeUZrnXkCBt7GCmofiGigkJiDl9Tp Vh+MXoO19Sm2gkrhtTPnteqsRHV/iVN9PzQCWfiV3Sejhc44d5LVrgBdjb7XPHFsZPlI ZSMBzCS6IElc3wJVFsaR5jxNsGRzvfEbXafhhAKelomRqTaTYGp5I5CyWqXSRjj+y9xC S6xA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:subject:to:cc:references:from:message-id:date :user-agent:mime-version:in-reply-to:content-language :content-transfer-encoding; bh=a/En1VGhUw/yHQqPWBN8GOVfG6fVriVWCVJ+LoSnNBI=; b=mPjsWH5gKVYexJLUp64JNOYaIci8/z6cEDEGyVhXtNZAEMyLyup9bi0rA20rCFUIXr sOxNBsLm161ULzIIhTtjPIwWSPs2sup5IdGy4J9xSsZxRq4ETpcp3Ga2DU2MLgJwT91g T4RniOuwu5UiFywUuC+V+Br0gBufBP55a6mFDNCS9lqr2Kfk3wxG8weo/OgX7S73ILot pJaasLImOWer/J5t9RZxqG+n+RNSl3KRKR7ApCXZEu3NCAQGCHkWo4kumUH+wd+9lKaj 9qkuz6MaLyCrWBSE4DM86+aiUluZRgXFPrXCVWrJY3MRQFAZWCH2Bi2H6PVBVDfEW5UA JJpw== X-Gm-Message-State: AGi0PubkZQrzh5TpR3bGlYfOiWLSFCFY/KdTfrtXFBKgr0FDfFGqzttX 0nGzpE2rafgc6I/RWNNDdqY= X-Google-Smtp-Source: APiQypK7mKzYzhKvc4Gi7j7QBuR1vrmgZnm/BxDJMcabHYrqLrKs0a4zTE9GLMK5XD9AdbwAv8Aevw== X-Received: by 2002:a05:620a:53c:: with SMTP id h28mr5499949qkh.362.1589225793637; Mon, 11 May 2020 12:36:33 -0700 (PDT) Original-Received: from ?IPv6:2601:184:4180:66e7:4d17:b25e:8d9:2188? ([2601:184:4180:66e7:4d17:b25e:8d9:2188]) by smtp.googlemail.com with ESMTPSA id b136sm8879090qkg.86.2020.05.11.12.36.32 (version=TLS1_3 cipher=TLS_AES_128_GCM_SHA256 bits=128/128); Mon, 11 May 2020 12:36:33 -0700 (PDT) In-Reply-To: <838shy9srs.fsf@gnu.org> Content-Language: en-GB Received-SPF: pass client-ip=2607:f8b0:4864:20::744; envelope-from=cpitclaudel@gmail.com; helo=mail-qk1-x744.google.com X-detected-operating-system: by eggs.gnu.org: No matching host in p0f cache. That's all we know. X-Spam_score_int: -20 X-Spam_score: -2.1 X-Spam_bar: -- X-Spam_report: (-2.1 / 5.0 requ) BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001 autolearn=_AUTOLEARN X-Spam_action: no action X-BeenThere: emacs-devel@gnu.org X-Mailman-Version: 2.1.23 Precedence: list List-Id: "Emacs development discussions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: emacs-devel-bounces+ged-emacs-devel=m.gmane-mx.org@gnu.org Original-Sender: "Emacs-devel" Xref: news.gmane.io gmane.emacs.devel:249876 Archived-At: On 11/05/2020 15.27, Eli Zaretskii wrote: >> Cc: rms@gnu.org, phillip.lord@russet.org.uk, eric@ericabrahamsen.net, >> casouri@gmail.com, emacs-devel@gnu.org, monnier@iro.umontreal.ca, >> ndame@protonmail.com >> From: Clément Pit-Claudel >> Date: Mon, 11 May 2020 15:13:23 -0400 >> >>> I think you are missing the main point. The problem is not >>> security, it is correct attribution. >> >> Sorry, it seems my email was unclear. The proposal doesn't have to do with security. I'm trying to find a robust way to figure out if someone has copyright papers. > > But that isn't the main problem. The main problem is how to identify > the name of the person for whom you need to check the status of > copyright assignment. We are talking about the situation where all > you have is a commit made by someone in a Git repository other than > that of Emacs. It has some name and some email. No, my situation is that I have someone sending me a pull request or a patch by email. I can ask this person if they have an assignment, but I can't check whether they in fact do. I'm proposing a way to fix the problem for future assignments and commits: if the convention is that patches should be signed by their author, it's easy to check if a patch has a corresponding assignment, using the signature. > We are talking about the situation where all > you have is a commit made by someone in a Git repository other than > that of Emacs. I don't understand this part. If there is no signature on that commit, how does it relate to the scheme I was proposing?